ArcKit Workflow
ArcKit guides you through a systematic 16-phase workflow for enterprise architecture governance, from initial planning through documentation publishing. This structured approach ensures nothing is forgotten and maintains complete traceability from stakeholder needs to final deliverables.Workflow Overview
The ArcKit workflow follows a dependency-driven sequence where each phase builds upon the outputs of previous phases:The 16 Phases
Phase 0: Project Planning
Phase 0: Project Planning
/arckit.planCreate a comprehensive project plan with:- GDS Agile Delivery phases (Discovery → Alpha → Beta → Live)
- Mermaid Gantt chart with timeline, dependencies, and milestones
- Workflow diagram showing gates and decision points
- Tailored timeline based on project complexity (Small/Medium/Large)
- Integration of all ArcKit commands into schedule
- Gate approval criteria for governance
ARC-{PID}-PLAN-v1.0.mdWhen to use: At project kick-off to visualize the entire delivery timelinePhase 1: Establish Governance
Phase 1: Establish Governance
/arckit.principlesDefine your organization’s architecture standards:- Cloud strategy (AWS/Azure/GCP)
- Security frameworks (Zero Trust, compliance)
- Technology standards
- FinOps and cost governance
- Data governance and privacy
ARC-000-PRIN-v1.0.md (global principles in projects/000-global/)Dependencies: None (foundation command)Note: All downstream design reviews and compliance assessments validate against these principlesPhase 2: Stakeholder Analysis
Phase 2: Stakeholder Analysis
/arckit.stakeholdersDo this BEFORE business case to understand who cares about the project and why:- Identify all stakeholders (internal and external)
- Document underlying drivers (strategic, operational, financial, compliance, risk, personal)
- Map drivers to SMART goals
- Map goals to measurable outcomes
- Create Stakeholder → Driver → Goal → Outcome traceability
- Identify conflicts and synergies
- Define engagement and communication strategies
ARC-{PID}-STKE-v1.0.mdDependencies: Principles (recommended)Critical: This analysis feeds into the business case and ensures all design decisions map back to stakeholder needsPhase 3: Risk Assessment
Phase 3: Risk Assessment
/arckit.riskDo this BEFORE business case to identify and assess risks systematically:- Follow HM Treasury Orange Book 2023 framework
- Identify risks across 6 categories (Strategic, Operational, Financial, Compliance, Reputational, Technology)
- Assess inherent risk (before controls) and residual risk (after controls)
- Apply 4Ts response framework (Tolerate, Treat, Transfer, Terminate)
- Link every risk to stakeholder from RACI matrix
- Monitor risk appetite compliance
- Feed into SOBC Management Case Part E
ARC-{PID}-RISK-v1.0.mdDependencies: Stakeholders (mandatory), Principles (recommended)Phase 4: Business Case Justification
Phase 4: Business Case Justification
/arckit.sobcDo this BEFORE requirements to justify investment and secure approval:- Use HM Treasury Green Book 5-case model (Strategic, Economic, Commercial, Financial, Management)
- Analyze strategic options (Do Nothing, Minimal, Balanced, Comprehensive)
- Map benefits to stakeholder goals (complete traceability)
- Provide high-level cost estimates (Rough Order of Magnitude)
- Economic appraisal (ROI range, payback period)
- Procurement and funding strategy
- Governance and risk management (uses risk register)
- Enable go/no-go decision BEFORE detailed requirements work
ARC-{PID}-SOBC-v1.0.mdDependencies: Stakeholders (mandatory), Risk (recommended), Principles (recommended)Phase 5: Define Requirements
Phase 5: Define Requirements
/arckit.requirementsCreate detailed requirements informed by stakeholder goals (if SOBC approved):- Business requirements with rationale
- Functional requirements with acceptance criteria
- Non-functional requirements (performance, security, scalability, compliance)
- Integration requirements (upstream/downstream systems)
- Data requirements (DR-xxx)
- Success criteria and KPIs
ARC-{PID}-REQ-v1.0.mdDependencies: Stakeholders (recommended), SOBC (recommended), Principles (recommended)Note: This is the central artifact - 38 downstream commands depend on requirementsPhase 5.3: Platform Strategy Design (Optional)
Phase 5.3: Platform Strategy Design (Optional)
/arckit.platform-designUse this phase when designing ecosystem-based platforms (Government as a Platform, marketplaces, data platforms):- Ecosystem Canvas: Map supply side, demand side, supporting entities
- Entity-Role Portraits: Deep dive into 3-5 key entities
- Motivations Matrix: Identify synergies and conflicts across entities
- Transactions Board: Design 10-20 transactions with cost reduction analysis
- Learning Engine Canvas: Services that help participants improve
- Platform Experience Canvas: Journey maps with business model
- MVP Canvas: Liquidity bootstrapping strategy
- Platform Design Canvas: Synthesize all canvases into cohesive strategy
ARC-{PID}-PLAT-v1.0.mdDependencies: Principles (mandatory), Requirements (recommended), Stakeholders (recommended)Use Cases: NHS appointment booking, local authority data marketplaces, training procurement platformsPhase 5.5: Data Modeling
Phase 5.5: Data Modeling
/arckit.data-modelCreate data model based on Data Requirements (DR-xxx):- Visual Entity-Relationship Diagram (ERD) using Mermaid
- Detailed entity catalog with attributes, types, validation rules
- PII identification and GDPR/DPA 2018 compliance
- Data governance matrix (business owners, stewards, custodians)
- CRUD matrix showing component access patterns
- Data integration mapping (upstream sources, downstream consumers)
- Data quality framework with measurable metrics
- Requirements traceability (DR-xxx → Entity → Attribute)
ARC-{PID}-DATA-v1.0.mdDependencies: Requirements (mandatory)Phase 5.7: Data Protection Impact Assessment
Phase 5.7: Data Protection Impact Assessment
/arckit.dpiaMANDATORY for high-risk processing - assess privacy risks before technology selection:- ICO 9-criteria automated screening (sensitive data, large scale, vulnerable subjects, AI/ML)
- Auto-populated from data model (entities, PII, special category data, lawful basis)
- Risk assessment focused on impact on individuals (privacy harm, discrimination)
- Data subject rights implementation checklist (SAR, deletion, portability)
- Children’s data assessment (age verification, parental consent)
- AI/ML algorithmic processing assessment (bias, explainability, human oversight)
- ICO prior consultation flagging for high residual risks
- International transfer safeguards (SCCs, BCRs, adequacy decisions)
ARC-{PID}-DPIA-v1.0.mdDependencies: Data Model (mandatory), Requirements (mandatory)Phase 5.8: Data Source Discovery
Phase 5.8: Data Source Discovery
/arckit.datascoutDiscover and evaluate external data sources to fulfil project data requirements:- Data needs extraction from DR/FR/INT/NFR requirements
- UK Government open data portals (data.gov.uk, ONS, NHS Digital, Companies House)
- Commercial API providers and data marketplaces
- Free/freemium APIs and open source datasets
- Weighted evaluation scoring (Requirements Fit, Data Quality, License & Cost, API Quality)
- Gap analysis for unmet data needs
- Data model impact assessment (new entities, attributes, sync strategy)
- Requirements traceability (every DR-xxx mapped to a source or flagged as gap)
ARC-{PID}-DSCOUT-v1.0.mdDependencies: Requirements (mandatory), Data Model (optional but recommended)Phase 6: Technology Research
Phase 6: Technology Research
/arckit.researchResearch available solutions to meet requirements with build vs buy analysis:- Dynamic category detection from requirements (authentication, payments, databases)
- Commercial SaaS options with pricing, reviews, and ratings
- Open source alternatives with GitHub stats and community maturity
- UK Government GOV.UK platforms (One Login, Pay, Notify, Forms)
- Digital Marketplace suppliers (G-Cloud, DOS)
- Total Cost of Ownership (TCO) comparison (3-year)
- Build vs Buy vs Adopt recommendations
- Vendor shortlisting for deeper evaluation
ARC-{PID}-RSCH-v1.0.mdDependencies: Requirements (mandatory)Cloud-specific research: Use /arckit.aws-research, /arckit.azure-research, or /arckit.gcp-research for authoritative cloud service documentation via MCP serversPhase 7: Strategic Planning with Wardley Mapping
Phase 7: Strategic Planning with Wardley Mapping
/arckit.wardley, /arckit.roadmap, /arckit.strategy, /arckit.adrVisualize strategic positioning and create long-term roadmaps:Wardley Maps (/arckit.wardley):- Component evolution analysis (Genesis → Custom → Product → Commodity)
- Build vs Buy decision framework
- Vendor comparison and procurement strategy
- Evolution predictions and strategic gameplay
/arckit.roadmap):- 3-5 year roadmap with Mermaid Gantt chart
- Strategic themes (Cloud migration, data modernization, security)
- Capability evolution (L1 Initial → L5 Optimized)
- Investment planning (CAPEX/OPEX budget by financial year)
- Governance framework and Service Standard gates
/arckit.strategy):- Synthesize multiple strategic artifacts into executive-level document
- Strategic vision, drivers, principles, current/target state
- Technology evolution (Build vs Buy, Technology Radar)
- Delivery roadmap summary and investment overview
/arckit.adr):- Document significant architectural decisions using MADR v4.0 format
- Y-Statement structured justification
- Options analysis with pros/cons and UK Government compliance impact
wardley-maps/ARC-{PID}-WARD-{NUM}-v1.0.md, ARC-{PID}-ROAD-v1.0.md, ARC-{PID}-STRAT-v1.0.md, decisions/ADR-{NUM}.mdDependencies: Requirements (recommended), Principles (recommended)Phase 8: Vendor Procurement (if needed)
Phase 8: Vendor Procurement (if needed)
/arckit.sow, /arckit.dos, /arckit.gcloud-search, /arckit.gcloud-clarify, /arckit.evaluateCreate RFP-ready documents and evaluate vendors:Statement of Work (/arckit.sow):- Scope of work and deliverables
- Technical requirements
- Vendor qualifications
- Evaluation criteria
- Contract terms
/arckit.dos) 🇬🇧:- DOS-compliant procurement documentation for UK Digital Marketplace
- Essential vs desirable skills from requirements
- Evaluation framework (40% Technical, 30% Team, 20% Quality, 10% Value)
/arckit.gcloud-search) 🇬🇧:- Live Digital Marketplace search using WebSearch
- Find actual services with suppliers, prices, features
- Service comparison table with recommendations
/arckit.gcloud-clarify) 🇬🇧:- Systematic gap analysis (MUST/SHOULD requirements vs service descriptions)
- Generate prioritized clarification questions for suppliers
- Risk assessment matrix for each service
/arckit.evaluate):- Create systematic scoring framework (100 points)
- Side-by-side proposal comparison
- Cost evaluation methodology
- Reference check templates
ARC-{PID}-SOW-v1.0.md, ARC-{PID}-DOS-v1.0.md, ARC-{PID}-GCLD-v1.0.md, ARC-{PID}-GCFY-v1.0.md, ARC-{PID}-EVAL-v1.0.mdDependencies: Requirements (mandatory)Phase 9: Design Review
Phase 9: Design Review
/arckit.hld-review, /arckit.dld-review, /arckit.diagramValidate designs against architecture principles and requirements:High-Level Design Review (/arckit.hld-review):- Architecture principles compliance
- Requirements coverage
- Security and compliance
- Scalability and resilience
- Operational readiness
/arckit.dld-review):- Component specifications
- API contracts (OpenAPI)
- Database schemas
- Security implementation
- Test strategy
/arckit.diagram):- Generate visual architecture diagrams using Mermaid
- C4 model (Context, Container, Component, Code)
- Deployment diagrams
- Network diagrams
- Data flow diagrams
ARC-{PID}-HLDR-v1.0.md, ARC-{PID}-DLDR-v1.0.md, diagrams/ARC-{PID}-DIAG-{NUM}-v1.0.mdDependencies: Requirements (mandatory), Principles (mandatory), HLD/DLD (external documents)Phase 10: Sprint Planning
Phase 10: Sprint Planning
/arckit.backlog, /arckit.trelloTransform requirements into sprint-ready user stories:Product Backlog (/arckit.backlog):- Convert requirements (BR/FR/NFR/INT/DR) to GDS-format user stories
- Multi-factor prioritization (MoSCoW + risk + value + dependencies)
- Organize into sprint plan with capacity balancing
- Generate traceability matrix (requirements → stories → sprints)
- Export to Jira/Azure DevOps (CSV) or custom tools (JSON)
/arckit.trello):- Push backlog to Trello board with sprint-based lists
- Cards with priority labels, story points, acceptance criteria checklists
- Colour-coded labels by MoSCoW priority
ARC-{PID}-BKLG-v1.0.md, ARC-{PID}-BKLG-v1.0.json, ARC-{PID}-BKLG-v1.0.csvDependencies: Requirements (mandatory), HLD (mandatory)Time savings: 75%+ (4-6 weeks → 3-5 days)Phase 11: ServiceNow Service Management Design
Phase 11: ServiceNow Service Management Design
/arckit.servicenowBridge architecture to operations:- CMDB design (derived from architecture diagrams)
- SLA definitions (derived from NFRs)
- Incident management design
- Change management plan
- Monitoring and alerting plan
- Service transition plan
ARC-{PID}-SNOW-v1.0.mdDependencies: Requirements (mandatory), Diagram (mandatory)Phase 12: Traceability
Phase 12: Traceability
/arckit.traceabilityEnsure complete coverage:- Requirements → Design mapping
- Design → Test mapping
- Gap analysis and orphan detection
- Change impact tracking
- Bidirectional traceability matrix
ARC-{PID}-TRAC-v1.0.mdDependencies: Requirements (mandatory), HLD (mandatory), DLD (mandatory)Phase 13: Quality Assurance
Phase 13: Quality Assurance
/arckit.analyzePeriodically assess governance quality across all artifacts:- Architecture principles compliance
- Requirements coverage and traceability
- Stakeholder alignment verification
- Risk management completeness
- Design review quality
- Documentation completeness and quality
- Gap identification and recommendations
ARC-{PID}-ANLZ-v1.0.mdDependencies: Principles (mandatory), all other artifacts (optional)When to use: Run periodically before milestones, design reviews, or procurement decisionsPhase 14: Compliance Assessment (UK Government)
Phase 14: Compliance Assessment (UK Government)
/arckit.service-assessment, /arckit.tcop, /arckit.secure, /arckit.ai-playbook, /arckit.atrs, /arckit.mod-secure, /arckit.jsp-936For UK Government and public sector projects:GDS Service Standard Assessment (/arckit.service-assessment):- Analyze evidence against all 14 Service Standard points
- Identify gaps for alpha, beta, or live assessments
- Generate RAG ratings and overall readiness score
/arckit.tcop):- Assess compliance with all 13 TCoP points
- Cloud first, open standards, data sharing, responsible AI
/arckit.secure):- NCSC Cloud Security Principles
- NCSC Cyber Assessment Framework (CAF)
- Cyber Essentials / Cyber Essentials Plus
- UK GDPR and DPA 2018 compliance
/arckit.ai-playbook) [for AI systems]:- AI ethics principles
- Transparency and explainability
- Fairness and bias mitigation
/arckit.atrs) [for algorithmic systems]:- Algorithm details and logic
- Purpose and use case
- Data sources and quality
- Performance metrics and monitoring
/arckit.mod-secure) [for MOD projects]:- JSP 440, IAMM, security clearances
- STRAP classification handling
/arckit.jsp-936) [for MOD AI projects]:- 5 Ethical Principles
- 5 Risk Classification Levels
- 8 AI Lifecycle Phases
- Approval pathways
Phase 15: Project Story & Reporting
Phase 15: Project Story & Reporting
/arckit.story, /arckit.presentationCreate narrative historical record and presentations:Project Story (/arckit.story):- Timeline Analysis (4 visualization types)
- 8 Narrative Chapters (Foundation → Compliance)
- Traceability Demonstration (end-to-end chains with Mermaid)
- Governance Achievements (TCoP, Service Standard, NCSC CAF)
- Lessons Learned (pacing analysis, timeline deviations)
/arckit.presentation):- Markdown-based slides with
---separators - Focus Modes (Executive, Technical, Stakeholder, Procurement)
- Artifact-Driven (reads all available project artifacts)
- Mermaid diagrams embedded natively
ARC-{PID}-STORY-v1.0.md, ARC-{PID}-PRES-v1.0.mdDependencies: Principles (recommended), all other artifacts (recommended)When to use: At project milestones or completion for stakeholder communicationPhase 16: Documentation Publishing
Phase 16: Documentation Publishing
/arckit.pagesPublish all project documentation as an interactive website:- Static site generation (
docs/index.htmlanddocs/manifest.json) - Mermaid diagram rendering inline with mermaid.js
- Project navigation with collapsible tree
- GOV.UK styling
- Document index for programmatic access
docs/index.html, docs/manifest.jsonDeployment: GitHub Pages, Netlify, Vercel, S3, etc.When to use: When sharing project documentation with stakeholders via web interface