Platform Architect
Golden paths and IDP.
The Platform Architect is the persona that designs the paved roads every team walks on. In an AI-native SDLC, the Platform Architect operates a stack of validated primitives, not a wiki full of aspirational diagrams.
Executive summary
The Platform Architect owns the Internal Developer Platform: the golden path templates, the capability matrix, and the architectural decision records that shape how every team builds. In an AI-native SDLC, the Platform Architect operates inside the Platform phase with a fixed set of primitives: one platform agent, four slash prompts, scoped instructions, schema-validated hooks, and a curated list of validated MCPs. The platform is delivered as a Backstage-style catalog backed by Azure DevOps and GitHub Enterprise, with Bicep-based service templates, GitHub reusable workflows, and Azure Policy initiatives. The primary outputs are template repositories, capability matrices, ADRs, and a measurable developer experience.
Role and responsibilities
Think of the Platform Architect like a city planner. The planner does not build the buildings; the planner defines the streets, utilities, zoning, and building codes that allow thousands of builders to work in parallel without the city collapsing. The planner’s success is measured not by the number of buildings they designed, but by the time it takes a new builder to break ground with confidence. In an AI-native SDLC, the city is the Internal Developer Platform, the streets are GitHub Actions reusable workflows, the utilities are Azure shared services, and the zoning is Azure Policy.
Primary responsibilities:
- Define and maintain the golden path templates for every service archetype (API, worker, front-end, data pipeline)
- Operate the Backstage-style catalog backed by Azure DevOps and GitHub Enterprise
- Author and govern architectural decision records in a central ADR repo
- Maintain the capability matrix that maps business domains to platform primitives
- Set the policy initiative in Azure Policy that applies to every subscription in scope
- Sponsor the validated MCP catalog and the agent governance model
- Operate the Path Keeper agent and the
/golden-path,/template-new,/adr-platform,/capability-matrixprompts
Jobs to be done
- As a Platform Architect, I want a new service repo created from a golden path template in minutes, so that teams start on the paved road.
- As a Platform Architect, I want every service to declare its capabilities in a machine-readable matrix, so that platform evolution is data-driven.
- As a Platform Architect, I want ADRs to be drafted from design conversations, so that the decision record is never skipped.
- As a Platform Architect, I want templates versioned and rolled forward via automated PRs, so that the paved road stays paved.
- As a Platform Architect, I want platform usage telemetry to flow into Application Insights, so that unused capabilities are retired, not accumulated.
- As a Platform Architect, I want the MCP catalog to be enforced at commit time, so that teams cannot install rogue MCPs.
Pain points before AI-native
- Templates rot. The scaffolding repo has not been updated in 14 months. New services start on the old road.
- ADRs are optional. Decisions are made in calls, documented later, or not at all. Context evaporates in six months.
- Capability matrix is a spreadsheet. Nobody updates it; nobody trusts it.
- Policy sprawl. Each subscription grows its own Azure Policy definitions. Compliance reports are contradictory.
- MCP free-for-all. Every team installs the MCP of the week. Supply-chain surface area explodes.
AI-native daily workflow
The Platform Architect operates a fixed loop each day. The loop uses GitHub Copilot primitives inside Visual Studio Code and Claude Code at the terminal, plus a small catalog of validated MCPs for external context.
Morning setup
- Open the platform monorepo in Visual Studio Code. GitHub Copilot Chat loads
AGENTS.mdand the scoped.github/instructions/*.instructions.mdfor templates and ADRs. - In Claude Code, run a daily report that queries the GitHub MCP for template usage, template drift PRs, and ADR review queue.
- Review the capability matrix for any service that fell out of compliance overnight (driven by Azure Policy and GitHub Advanced Security).
- Triage the inbound template requests in Azure Boards.
Midday execution
Each midday cycle is a single platform change, typically 2 to 4 hours of focused work.
- Golden path. Invoke
/golden-pathwith an archetype (API, worker, front-end, data). The Path Keeper agent composes the template from Bicep modules, GitHub reusable workflows, and the validated MCP catalog. - Template change. Invoke
/template-newto version the template, open a rollout PR fleet across consuming repos, and attach a migration guide. - ADR. Invoke
/adr-platformto draft an ADR from the design meeting transcript. The agent fills the EARS constraints, the options considered, and the decision rationale. - Capability matrix. Invoke
/capability-matrixto refresh the domain-to-primitive map from the service catalog index. - Pull request. The PR description is composed from the ADR and the template diff. GitHub Copilot Code Review scans for policy drift.
Afternoon governance
- Run a weekly template drift report in Azure Monitor. Services more than two minor versions behind are flagged.
- Publish the capability matrix snapshot to the Microsoft 365 SharePoint site for the platform review meeting.
- Hand off infrastructure changes to the DevOps Engineer; hand off security posture changes to the InfoSec Officer.
Recommended primitives
Agents
| Agent | File | Purpose |
|---|---|---|
path-keeper | .github/agents/path-keeper.agent.md | Author golden paths, govern templates, draft ADRs, maintain the capability matrix |
The Path Keeper agent uses claude-sonnet-4-6 by default. It holds tools read, edit, search, grep, glob, bash, and MCP bindings to GitHub MCP Server and Azure DevOps MCP Server for catalog traversal.
Prompts
| Command | File | Purpose |
|---|---|---|
/golden-path | .github/prompts/golden-path.prompt.md | Compose a new golden path template for a service archetype |
/template-new | .github/prompts/template-new.prompt.md | Version a template and open the rollout PR fleet |
/adr-platform | .github/prompts/adr-platform.prompt.md | Draft an ADR from a design meeting transcript or specification |
/capability-matrix | .github/prompts/capability-matrix.prompt.md | Refresh the domain-to-primitive capability matrix |
Instructions
Scoped applyTo reduces token cost by approximately 68 percent compared to global instructions.
Scope (applyTo) | File | Purpose |
|---|---|---|
templates/**/* | .github/instructions/templates.instructions.md | Template parameter schema, README structure, upgrade path |
adr/**/*.md | .github/instructions/adr.instructions.md | ADR format: context, options, decision, consequences |
catalog/**/*.yaml | .github/instructions/catalog.instructions.md | Catalog schema, ownership, lifecycle |
Skills
Skills are lazy-loaded, so the Platform Architect can install many and pay tokens only for the ones that trigger.
template-drift-scan: calls GitHub MCP to list consuming repos still on old template versionsmcp-catalog-enforcer: refuses PRs that add MCPs not present in the validated catalog
Hooks
Hooks cost zero LLM tokens. They are the strongest governance layer.
pre-commit: validate template parameter schema and ADR front matterpre-merge: verify template version bump and migration guide on any template changepost-merge: open rollout PRs across consuming repos via the GitHub MCP
Validated MCPs
Every MCP below is registered in the MCP catalog. Do not reference any MCP that is not in the catalog.
| MCP | Status | Use in this persona |
|---|---|---|
| GitHub MCP Server | Official | Catalog traversal, template rollout PRs, usage telemetry |
| Azure DevOps MCP Server | Official (Microsoft) | Read intake tickets, update Azure Boards, manage pipeline templates |
| Azure MCP Server | Official (Microsoft) | Query Azure Policy initiatives and resource group inventories |
| Microsoft Learn Docs MCP | Official | Fetch Azure Well-Architected Framework and Azure reference guidance during ADR drafting |
| Microsoft 365 Agents SDK MCP | Official (Microsoft) | Publish capability matrix snapshots and ADR notifications into Teams and SharePoint |
| Playwright MCP | Official (Microsoft) | Validate that golden path templates bootstrap working end-to-end smoke tests |
Real examples
Scenario A: launch a new API golden path
Input: The org decides that every new internal API must use Azure API Management, Entra ID auth, and a Bicep-deployed App Service. No other archetype is allowed for internal APIs.
Invocation: /golden-path with archetype internal-api.
Expected output:
- A template repo
template-internal-apiwith Bicep module, GitHub Actions reusable workflow, Entra ID app registration skeleton, and OpenAPI scaffold. - An Azure Policy initiative that denies any App Service created outside this template.
- An ADR
adr/0042-internal-api-golden-path.mdrecording the decision, options considered, and consequences. - A capability matrix update linking the
internal-apiarchetype to the shared APIM instance.
Scenario B: roll forward a breaking template change
Input: The org upgrades the standard .NET runtime from 8 to 9. Every service using the API golden path must upgrade.
Invocation: /template-new with the template version bump.
Expected output:
- A new template version
template-internal-api@2.0.0with the runtime bumped and a migration guide. - A fleet of PRs opened by the Path Keeper agent across every consuming repo, each with the migration diff and a link to the ADR.
- A drift dashboard in Application Insights that shows adoption over time, published to the platform review meeting.
Anti-patterns
- Template as wiki page. A markdown page that describes the golden path without a scaffolding engine. Mitigation: every golden path is a real template repo with parameters and tests.
- ADRs written after the fact. Decisions are documented months later, if at all. Mitigation:
/adr-platformdrafts from the design meeting transcript during the meeting. - Manual capability matrix. A spreadsheet that nobody updates. Mitigation:
/capability-matrixregenerates from the catalog YAML. - MCP free-for-all. Teams install any MCP they find. Mitigation:
mcp-catalog-enforcerskill refuses PRs that reference uncatalogued MCPs. - Policy per subscription. Each subscription grows its own Azure Policy tree. Mitigation: a single initiative owned by the Platform Architect, assigned at the management group.
KPIs and impact metrics
The Platform Architect persona is evaluated with a mix of platform engineering and developer experience metrics.
| Metric | Baseline (manual) | Target (agentic) | Measurement |
|---|---|---|---|
| Time to first commit for a new service | 2 weeks | < 1 day | Time from intake to first merged PR |
| Template adoption rate | 40 percent | > 90 percent | Percent of services on the latest golden path |
| ADR coverage | 20 percent | > 95 percent | Percent of architecture decisions with a linked ADR |
| Capability matrix freshness | Quarterly | Weekly | Days since last refresh |
| Platform NPS from developers | Unknown | > 40 | Quarterly survey |
| Policy compliance | 70 percent | > 98 percent | Azure Policy compliance score |
| MCP catalog drift | Unmeasured | 0 uncatalogued MCPs | Repo scan |
| Token efficiency | N/A | < 300k tokens per template version | Copilot usage report |
Maturity in four levels
| Level | Name | Markers |
|---|---|---|
| L1 | Manual | Scaffolding is a wiki page, ADRs optional, policies per subscription |
| L2 | Assisted | Template repo exists but drifts, GitHub Copilot helps draft ADRs occasionally |
| L3 | Augmented | One Path Keeper agent, four slash prompts, scoped instructions, two MCPs, template rollout automated |
| L4 | Agentic | Full primitives kit, hooks enforced, MCP catalog enforced, capability matrix refreshed weekly, ADR coverage > 95 percent |
Integration with other personas
Handoffs:
- From Enterprise Architect: target architecture, reference patterns, investment themes
- From Software Architect: service-level ADRs that bubble up to platform decisions
- To DevOps Engineer: reusable workflows, Bicep modules, policy initiatives
- To Developer: scaffolded repo, scoped instructions, validated MCP catalog
- To InfoSec Officer: policy initiative, MCP catalog, Entra ID app registration skeleton
Glossary
- Agent: a configured LLM role with tools, instructions, and a defined output shape.
- Prompt: a reusable slash command that invokes an agent with a specific task.
- Instructions: scoped guidance applied by pattern match on file paths via
applyTo. - Skill: a lazy-loaded capability that activates on keyword match.
- Hook: a zero-token rule enforced at a specific lifecycle event.
- MCP: Model Context Protocol server that exposes external systems to the agent.
- Golden path: the paved road every team is expected to use; deviation requires an ADR.
- IDP: Internal Developer Platform; the system that makes the golden path easy to follow.
- ADR: Architectural Decision Record; a dated markdown file that captures context, options, decision, consequences.
- Capability matrix: a machine-readable map from business domain to platform primitive.
References
- Azure Well-Architected Framework — the reference for platform design decisions
- GitHub Enterprise documentation — the platform on which the IDP is built
- Azure DevOps documentation — templates, pipelines, boards
- Azure Policy documentation — initiatives, assignments, remediation
- Backstage documentation — the catalog pattern the IDP follows
- Model Context Protocol specification — the protocol that binds agents to external systems
- Team Topologies — the organizational model behind platform teams