ATAM-Style Reviews

The Architecture Tradeoff Analysis Method (ATAM) is a structured review process that evaluates an architecture against quality attribute scenarios — specific, measurable descriptions of how the system should behave under specific conditions. "When 10,000 users submit orders simultaneously, the system processes all orders within 5 seconds with zero data loss." ATAM tests the architecture against these scenarios to identify sensitivity points — where a small change in the design causes a large change in quality attributes.

1. Quality Attribute Scenarios Define scenarios as: source (who or what triggers), stimulus (what happens), artifact (what component is affected), environment (under what conditions), response (what the system does), and response measure (how success is measured). This structure transforms vague requirements like "the system should be fast" into testable scenarios like "when a user submits an order, the system confirms within 2 seconds under normal load."
2. Sensitivity Analysis Identify architecture decisions that are sensitivity points — where a small change significantly affects a quality attribute. "Using synchronous database writes for order confirmation is a sensitivity point for latency — any increase in database response time directly increases user-facing latency." Sensitivity points are the architectural decisions that deserve the most scrutiny and the most robust ADRs.
3. Risk Identification ATAM produces a risk catalog — the list of scenarios where the architecture may not satisfy the quality attribute requirement. Each risk is paired with the sensitivity point that creates it and the decision that could mitigate it. The risk catalog is the input to the design review's decision queue.