04 architect · Governance

Enterprise Architect

Constitution and ADRs.

Updated: 2026-04-24 14 sections Download .zip

The Enterprise Architect is the persona that authors the constitution and curates the decision record. In an AI-native SDLC, the Enterprise Architect operates a stack of validated primitives that turn principles into enforceable policy.

Executive summary

The Enterprise Architect defines the enduring architectural principles, capability model, and decision records that constrain every squad decision in the organization. In an AI-native SDLC the Enterprise Architect operates inside the Governance phase with a fixed set of primitives: one ADR authoring agent, four slash prompts, scoped instructions, schema-validated hooks, and a curated list of validated MCPs. Primary outputs are the CONSTITUTION.md, the Architecture Decision Record catalog, the capability scan report, and the principle-check gates that run on every pull request.

Role and responsibilities

Think of the Enterprise Architect like a constitutional court. They do not pass laws and they do not deliver judgments on every parking ticket, but when a case brings a principle into question, the judgment they render becomes binding precedent. In an AI-native SDLC the principles live in CONSTITUTION.md, the precedents live in ADRs under docs/adr/, and the Enterprise Architect is accountable for coherence across both.

Primary responsibilities:

  • Author and maintain CONSTITUTION.md with the enduring architectural principles and constraints
  • Curate the ADR catalog with a stable ID schema, status lifecycle, and supersession links
  • Run capability scans that surface coverage, overlap, and gaps across the enterprise technology portfolio
  • Govern the principle-check gate that runs on every architecture-adjacent pull request
  • Operate the ADR Drafter agent and the /constitution, /adr, /principle-check, /capability-scan prompts
  • Publish the quarterly architecture review to the leadership Teams channel
  • Align enterprise direction with Microsoft Azure Well-Architected Framework pillars and GitHub platform standards

Jobs to be done

  1. As an Enterprise Architect, I want principles authored in markdown with machine-readable tags, so that gates can enforce them without me in the loop.
  2. As an Enterprise Architect, I want every significant decision captured as an ADR within 48 hours, so that context never evaporates with the author.
  3. As an Enterprise Architect, I want principle checks to run on every architecture PR, so that violations are caught before merge.
  4. As an Enterprise Architect, I want capability scans to surface overlap and gaps, so that portfolio rationalization is data-driven.
  5. As an Enterprise Architect, I want ADRs to supersede, not overwrite, so that the decision history remains auditable.
  6. As an Enterprise Architect, I want quarterly reviews generated from the ADR diff, so that leadership sees the direction of travel.

Pain points before AI-native

  1. Principles trapped in slide decks. Slides cannot be enforced by a hook or referenced by a PR comment. Compliance drifts silently.
  2. ADRs written after the fact. Records authored months later miss the real trade-offs and the people who made them have moved on.
  3. Capability portfolio invisible. Multiple teams solve the same problem with different stacks, and nobody notices until an acquisition.
  4. Principle checks done in review meetings. A review that catches a violation after sprint planning is weeks too late.
  5. Supersession as edit in place. When an ADR is overwritten, audit trail and reasoning evaporate.

AI-native daily workflow

The Enterprise Architect operates a fixed loop each day. The loop uses GitHub Copilot primitives inside Visual Studio Code and Claude Code at the terminal, plus a small catalog of validated MCPs for external context.

Morning setup

  1. Open the architecture repository in Visual Studio Code. GitHub Copilot Chat loads AGENTS.md and the scoped constitution instructions.
  2. Pull the latest main, review overnight ADR drafts, and list architecture PRs awaiting principle-check.
  3. Run /principle-check across open PRs using the GitHub MCP to surface potential violations.
  4. Review the capability scan dashboard generated from the Azure MCP Server telemetry.

Midday execution

  1. ADR drafting. Invoke /adr on each decision captured in yesterday’s design conversation. The ADR Drafter agent produces a dated record with context, options, decision, and consequences.
  2. Constitution update. Invoke /constitution when a recurring ADR pattern warrants a new principle. The agent drafts the clause, tags it, and proposes the gate expression.
  3. Capability scan. Invoke /capability-scan on the portfolio to detect overlap, gaps, and principle violations in production workloads. The agent uses the Azure MCP and GitHub MCP to aggregate evidence.
  4. Principle-check consultations. Respond to squad requests in Microsoft Teams via the Microsoft 365 Agents SDK, with ADR links as the canonical citation.

Afternoon review

  1. Invoke /principle-check as the final sweep on all open architecture PRs. Block merge on unresolved principle violations, unblock with a linked ADR that either complies or explicitly supersedes.
  2. Open a pull request on the ADR catalog and CONSTITUTION.md changes. GitHub Copilot Code Review comments on clause quality and cross-references.
  3. Regenerate the quarterly architecture review draft from the ADR diff. A post-commit hook updates the draft on every merge.
  4. Publish the daily architecture digest to the leadership Teams channel via the Microsoft 365 Agents SDK.

Agent

AgentFilePurpose
adr-drafter.github/agents/adr-drafter.agent.mdDraft and curate ADRs, maintain CONSTITUTION.md, run principle checks and capability scans

The ADR Drafter uses claude-sonnet-4-6 by default. Tools: read, edit, search, grep, glob. No bash access. Extended thinking is enabled for /capability-scan only, where cross-portfolio correlation benefits from deep reasoning.

Slash prompts

CommandFilePurpose
/constitution.github/prompts/constitution.prompt.mdAuthor or revise an enduring architectural principle
/adr.github/prompts/adr.prompt.mdDraft an Architecture Decision Record with context, options, decision, consequences
/principle-check.github/prompts/principle-check.prompt.mdSweep open PRs for principle violations and ADR alignment
/capability-scan.github/prompts/capability-scan.prompt.mdDetect portfolio overlap, gaps, and principle violations in production

Instructions scoped

Scoped applyTo reduces token cost by approximately 68 percent compared to global instructions.

Scope (applyTo)FilePurpose
CONSTITUTION.md.github/instructions/constitution.instructions.mdPrinciple clause format, tag schema, gate expression syntax
docs/adr/**/*.md.github/instructions/adr.instructions.mdADR template, status lifecycle, supersession rules
docs/capability/**/*.md.github/instructions/capability.instructions.mdCapability map schema and evidence requirements

Hooks

Hooks cost zero LLM tokens. They are the strongest governance layer for enterprise architecture.

  • pre-commit: reject any ADR without context, options, decision, and consequences; reject any principle without a tag and a gate expression
  • post-commit: regenerate the ADR index and the quarterly review draft
  • pre-merge: run principle-check on the diff and block merge on unresolved violations unless a linked ADR supersedes

Validated MCPs

MCPPurposeOwner
GitHub MCP ServerRead architecture PRs, ADRs, and principle-check runs across the organizationGitHub (official)
Azure MCP ServerInspect production workloads, Azure Policy state, and Azure Monitor telemetry for capability scansMicrosoft (official)
Microsoft Learn Docs MCPGround principles and ADRs in the current Well-Architected Framework and Microsoft product documentationMicrosoft (official)
Azure DevOps MCP ServerRead Azure Boards portfolio items when the team uses Azure DevOpsMicrosoft (official)
Microsoft 365 Agents SDK MCPPublish digests to leadership Teams channels and ingest decisions from OutlookMicrosoft (official)

Real examples

Example 1: author a new principle from a recurring ADR pattern

Input: Four recent ADRs independently adopted Azure Key Vault for secret storage in four different squads.

Invocation: /constitution followed by /principle-check.

Expected output:

  1. A new principle in CONSTITUTION.md titled “Secret storage must use Azure Key Vault with managed identity”, tagged security, with a gate expression that matches direct secret values in .env files.
  2. Four ADR updates marking the prior decisions as instances of the new principle.
  3. A sweep report that flags three new violations across repositories, each filed as a GitHub issue via the GitHub MCP.

Example 2: capability scan ahead of a reorganization

Input: Leadership requests a portfolio rationalization view ahead of the fiscal planning cycle.

Invocation: /capability-scan with scope enterprise.

Expected output:

  1. A docs/capability/2026-q3-scan.md with overlap rings for customer identity, payment processing, and document storage.
  2. Nine principle violations in production workloads detected via the Azure MCP, each linked to the owning team and the offending resource ID.
  3. A summary digest posted to the leadership Teams channel via the Microsoft 365 Agents SDK.

Anti-patterns

  1. Principles without gates. A principle that cannot be checked is a poster. Mitigation: the pre-commit hook rejects principles without a gate expression.
  2. ADRs edited in place. Overwriting destroys audit trail. Mitigation: supersession via a new ADR ID is the only allowed path.
  3. Verbal architecture reviews. If the review does not produce an ADR, the decision will be relitigated. Mitigation: every review closes by invoking /adr.
  4. Capability sprawl unmeasured. Without a scan, overlap grows quietly. Mitigation: /capability-scan runs on a scheduled GitHub Actions workflow.
  5. Principle-check as review-meeting item. Too late, too verbal. Mitigation: pre-merge hook runs the check automatically.

KPIs and impact metrics

KPIBaselineTargetMeasurement
ADR cycle time, decision to merged record2 weeks< 48 hoursGitHub PR timestamps
Principle-check PR coverage25 percent100 percentGitHub Actions runs
Principles with gate expressions10 percent100 percentConstitution linter
Capability scan cadenceAd-hocMonthlyScheduled GitHub Actions run
Principle violations remediated within SLA40 percent> 90 percentViolation issues closed
ADR supersession rate vs overwrite30 percent100 percentADR history diff audit

Maturity in four levels

LevelNameMarkers
L1ManualPrinciples in slides, ADRs irregular, capability map verbal
L2AssistedCopilot used to polish ADR prose, no gates, no catalog structure
L3AugmentedADR Drafter agent, four slash prompts, scoped instructions, GitHub and Azure MCPs, principle-check on PR
L4AutonomousFull primitives kit, hooks enforced, capability scans scheduled, quarterly review generated, supersession discipline

Integration with other personas

  • From Business Manager: OKR tree that informs principle priorities and capability coverage
  • To Software Architect: principles and ADRs that constrain CODEMAP.md and API contract decisions
  • To Technical Lead: machine-readable principles that feed scoped instructions and hooks across squads
  • To Platform Architect: capability scan evidence that drives platform service roadmap
  • To InfoSec Officer: security principles with gate expressions that align with GitHub Advanced Security and Azure Policy
  • To Compliance Auditor: ADR history as auditable decision record
  • To DevOps Engineer: principle-check as a required status check on every architecture-adjacent workflow

Glossary

  • Constitution: the living document of enduring architectural principles, tagged and bound to gate expressions.
  • ADR: Architecture Decision Record. A dated, numbered record with context, options, decision, and consequences.
  • Principle: a constraint that all squads must satisfy unless a linked ADR explicitly supersedes.
  • Principle-check: automated sweep that verifies pull request changes against principle gate expressions.
  • Capability scan: portfolio-wide analysis of coverage, overlap, and gaps across services.
  • Supersession: the act of replacing an ADR with a new ADR that explicitly links the prior record.

References