Skip to content
One governed project system

Specs-Driven Development

Decide with complete context. Execute under control. Verify with evidence.

SDD keeps human decisions, agent actions, requirements, risk, tests, and proof inside one traceable project model.

Enterprise context Controlled action Auditable proof
The product model

Three forces. One governed loop.

SDD does not stop at generating content. It controls why a change exists, how it moves, and what proves the result.

01

Decision

See the whole project before changing it.

Starts with
Trusted systems, documents, project knowledge, human intent
Produces
Approved requirements, specifications, controls, and ownership

Every decision retains its source, rationale, reviewer, and downstream impact.

02

Execution

Turn approved intent into controlled action.

Starts with
Approved scope, acceptance boundaries, risks, and team context
Produces
Coordinated tasks, reviews, tests, protocols, releases, and synchronized updates

Human and agent work stays attached to the governing requirement and its evidence obligations.

03

Verification

Prove what happened, then improve the next decision.

Starts with
Acceptance criteria, test definitions, execution context, and risk controls
Produces
Coverage, results, deviations, traceability, and audit-ready evidence

Findings return through controlled feedback, never as an untracked automatic change.

Verification finding Controlled review Next decision
Enterprise Mirror foundation

Keep trusted systems. Gain one structured context.

SDD mirrors existing sources, adds project knowledge and traceability, then updates enterprise systems through explicit controlled actions.

Trusted systems Polarion / Jira / DOORS / GitHub
Enterprise Mirror Structured project model
People and agents QA / Testers / Developers / Managers
Explore Enterprise Mirror
A visual grammar for traceability

Know what you are looking at before you read it.

Artifact identity is stable. Approval, coverage, and execution status remain separate signals.

Requirement
Business intent

A controlled statement of what must be true and why it matters.

Specification
Execution contract

The precise behavior, boundary, and acceptance conditions that answer the requirement.

Issue
Accountable action

A traceable unit of work or finding linked to the contract it changes or resolves.

Risk
Controlled uncertainty

A hazard, impact, mitigation, and verification path carried with the project.

Test
Objective proof

A repeatable check and its execution evidence against the intended result.

Lifecycle detail

Follow the chain into the evidence

Inspect how each governed record changes the project model and strengthens the final proof.

Demand capture

Capture the business or process intent

Start from the original reason for change before it is reduced to tickets, procedures, or test work.

Source

Conversation, uploaded document, issue, ticket, MCP Add Intent, or operational finding.

SDD control

SDD searches project memory, related items, vocabulary, duplicates, and previous decisions.

Output

Intent record with source, author, rationale, candidate links, and suggested requirement direction.

Proof line

The original context remains connected to every later requirement, change, and proof artifact.

Controlled need

Turn intent into an approved requirement

Make the need precise enough to review, approve, implement, test, and audit.

Source

Approved intent, imported requirement, business rule, process constraint, or regulatory obligation.

SDD control

SDD applies category, hierarchy, lifecycle state, ownership, and review policy.

Output

Controlled requirement with status, parent/child links, rationale, and change history.

Proof line

Approval evidence explains why controlled execution may start and what scope it covers.

Execution contract

Describe the controlled change

Translate the requirement into a process, product, or software contract with acceptance boundaries.

Source

Approved requirement, project knowledge, architecture context, procedures, and historical decisions.

SDD control

SolveRequirement and SolveSpecification create linked specifications and acceptance criteria.

Output

Specification, acceptance criteria, assumptions, and implementation boundary.

Proof line

Each specification remains traceable to the requirement and to the tests that will prove it.

Risk and control

Connect risks before execution

Bring risk analysis into the same memory as requirements and validation, instead of rebuilding it at the end.

Source

Requirement, process step, equipment, compliance context, hazard, failure mode, or tester remark.

SDD control

SDD links risks to controls, mitigations, verification rows, and impacted artifacts.

Output

Risk-control model with trace links to protocols, test cases, and evidence.

Proof line

Validation can show which control answers which risk and where it was verified.

Protocol and procedure

Bind procedures and protocols to the current process state

Prepare controlled execution with the right version, prerequisites, tools, data, suites, cases, and steps.

Source

Specifications, risk controls, prerequisites, required tools, required data, and release context.

SDD control

SDD versions test suites, test cases, protocols, TCF/TPO imports, and execution setup.

Output

Protocol content and execution session ready for controlled testing or process verification.

Proof line

The protocol is generated from source data instead of being manually reassembled.

Execution evidence

Execute while keeping design and result aligned

Record manual or automated execution without separating step design from results, comments, and evidence.

Source

Test case, versioned steps, expected result fields, execution session, tester comments, and evidence files.

SDD control

SDD keeps each step and result together, tracks comments, deviations, found issues, and status.

Output

Run results with pass/fail/N/A status, detailed answers, evidence, and issue links.

Proof line

Execution evidence stays aligned with the designed step and its requirement/risk origin.

Audit package

Generate the proof from structured memory

Produce documents and matrices from the same linked records used to manage the validated process.

Source

Runs, approvals, releases, reference documents, risks, requirements, suites, cases, and history.

SDD control

SDD assembles controlled exports, traceability matrices, revision records, and approval metadata.

Output

DOCX, PDF, XLSX, traceability matrix, version history, and audit-ready evidence package.

Proof line

The final proof references the source history instead of describing itself or disconnected documents.

Who benefits

WIIFM by role

Each group gets a different outcome, but the same source of truth.

Management and PMO

Govern validated processes from business demand to release and verification evidence.

They get status that is based on linked requirements, issues, tests, and approvals instead of slideware or manual reporting.

  • Business demand stays connected to process definition, implementation work, and verification.
  • Review gates, ownership, and change requests are visible.
  • Process risk is easier to explain before it becomes budget or compliance risk.

Product owners and business analysts

Turn intent, meetings, and domain knowledge into requirements that can be reviewed.

They stop losing business nuance between conversation, ticket, specification, implementation, and validation.

  • Intent becomes structured requirements with context.
  • Duplicate and inconsistent demands can be detected earlier.
  • Acceptance intent survives the move into engineering, QA, validation, and operations.

Architects and system owners

Keep architecture decisions and project conventions available to every agent and contributor.

They get fewer isolated AI changes because agents work from persistent project memory and best-practice prompts.

  • Reusable system and process context is searched before work starts.
  • Process and development contracts define responsibility boundaries.
  • Service impact analysis shows what a change may affect.

Engineering and implementation teams

Solve requirements, specifications, procedures, and issues with the business context already loaded.

They spend less time reconstructing why work exists and more time producing controlled, traceable changes.

  • SolveRequirement, SolveSpecification, and SolveIssue guide implementation.
  • Approval gates prevent premature process or code changes.
  • Commits, tests, and comments carry SDD references.

QA and validation

Prove process requirements and acceptance criteria coverage with executable tests, test runs, and evidence.

They get a living coverage model instead of a spreadsheet rebuilt at the end of the validation effort.

  • Acceptance criteria map to test cases and test runs.
  • Manual and automated tests share trace links.
  • TPO/TCF workflows preserve protocol identity and versions.

Quality, compliance, and auditors

Review traceability, risk controls, approvals, and evidence without chasing teams.

They get audit-ready proof that is continuously built as the validated process evolves.

  • Requirement lifecycle states are explicit.
  • Risk, verification, and compliance matrix entries are linked.
  • Exports and protocol documents are generated from source data.

Release and operations managers

Connect releases, process changes, pull requests, commits, test runs, and deployment evidence.

They get a cleaner answer to what changed, why it changed, and how it was validated.

  • GitHub/Jira/Azure DevOps links stay attached to SDD items.
  • Commit impact can be analyzed by service boundary.
  • Release evidence remains tied to test protocols.

Support and operations

Turn process findings, production findings, or user feedback into traceable issues and change requests.

They get problems linked back to the original demand and forward to the fix and validation evidence.

  • Issues can reference impacted requirements and specifications.
  • Found issues from test runs stay linked to evidence.
  • Follow-up changes keep history instead of overwriting intent.
Schema content

Solution stories

These are the detailed sales-page slides: who acts, what the SDD agent uses, what data is touched, and what proof comes out.

Field examples

Schematic use cases

Three practical ways SDD connects enterprise sources, requirement cycles, and controlled execution actions.

Two-way rails move structured records between a trusted archive, a central mirror, and a governed verification campus.
Enterprise mirror

Polarion Mirror Integration

Mirror Polarion requirements into SDD so regulated teams can keep the enterprise source while creating controlled specifications, tests, and proof in the validation workspace.

  • Import and reconcile Polarion work items with SDD requirements.
  • Preserve external references while adding SDD traceability.
  • Use mirrored context for specification, acceptance criteria, and protocol generation.
View Enterprise Mirror
Context Polarion
Context SDD Mirror
Test Specs and Tests
Context Evidence
A circular architectural process carries controlled records through review, specification, testing, and an evidence feedback loop.
Lifecycle control

Requirement Cycle Improvement

Improve the requirement cycle by connecting intent, review, specification, acceptance criteria, tests, and execution evidence instead of managing each step as a separate document activity.

  • Detect gaps, ambiguity, and missing acceptance coverage earlier.
  • Create specifications and acceptance criteria from approved requirements.
  • Feed findings back into controlled change and review loops.
Context Intent
Requirement Requirement Review
Test Criteria and Tests
Context Feedback Loop
A console action passes through structured project context and a reviewer gate before entering an audit evidence archive.
Agent execution

Actions in Console

Run controlled SDD actions from the console so AI-assisted implementation, traceability updates, and validation work stay attached to the project model.

  • Execute SDD-aware commands from the same operational context.
  • Keep agent work linked to requirements, specifications, issues, and tests.
  • Capture action output as traceable project evidence.
Context Console Action
Context SDD Context
Context Controlled Change
Context Traceable Output
SRP use cases

Full use-case catalog by validated-process phase

Each card is intentionally narrow: one phase, one problem, one SDD fix, one proof chain.

1. Strategy and governance

Create the control model before execution accelerates.

Project memory bootstrap

Available

Management, architects, implementation teams

Problem
New AI sessions start without context.
SDD fix
SDD ingests repository and project knowledge through InitSDD/BootstrapSDD patterns.
WIIFM
Every contributor and agent starts from the same project memory.
Context AGENTS.md Context Architecture docs Context Project context

Process contracts and sub-project governance

Available

PMO, architects, process owners

Problem
Large validated projects lose ownership boundaries.
SDD fix
SDD models sub-projects and process/development contracts with scope, risks, obligations, and audit entries.
WIIFM
Managers can assign accountability without hiding technical detail.
Context Sub-projects Context Contracts Context Audit entries

Role and review policy enforcement

Available

Quality, PMO, auditors

Problem
Review gates are informal or inconsistent.
SDD fix
SDD applies project review requirements for requirements, specifications, and issues.
WIIFM
Approvals become explicit and measurable.
Context Review policy Context Validations Context Workspace roles

Audit-ready decision history

Available

Auditors, quality, management

Problem
Decision proof is scattered across tools.
SDD fix
SDD records lifecycle states, role changes, audit events, comments, and linked artifacts.
WIIFM
Audits become evidence review, not archaeology.
Context Audit events Context Status history Context Comments

2. Discovery and intent

Convert informal demand into structured, reviewable requirements.

Intent capture from conversation

Available

Product owners, SMEs, analysts

Problem
Business intent is trapped in meetings and notes.
SDD fix
SDD uses dictation/transcription and intent analysis to extract work items.
WIIFM
Business input becomes structured project data.
Context Transcript Requirement Requirement draft Context Analysis result

Duplicate and redundancy detection

Agent-assisted

Business analysts, QA

Problem
Multiple teams describe the same need differently.
SDD fix
SDD compares new intent against existing requirements/specifications/issues and project knowledge.
WIIFM
Teams avoid parallel requirements that later conflict.
Context Context search Context Related items Context Suggestion list

Requirement clarification with project context

Available

Analysts, architects

Problem
A requirement is too vague to implement.
SDD fix
SDD pulls relevant project context and templates before proposing clearer wording.
WIIFM
The requirement becomes specific without losing domain context.
Context Prompt template Context Knowledge search Requirement Requirement update

Requirement hierarchy modeling

Available

Product owners, PMO

Problem
High-level needs and detailed requirements are not connected.
SDD fix
SDD supports parent/child requirement links with lifecycle-aware change reasons.
WIIFM
Scope can be reviewed at both business and implementation levels.
Context Parent link Requirement Child requirements Context Change reason

3. Requirements and specification

Make requirements implementable and testable.

Requirement lifecycle control

Available

Quality, analysts, implementation teams

Problem
Work starts before approval is clear.
SDD fix
SDD tracks Draft, Approved, Implemented, and Verified states and solve flows enforce approval policies.
WIIFM
Teams stop executing against unapproved demand.
Context Lifecycle state Context Approval metadata Context Solve gate

Polarion and Jira import alignment

Available

Requirements engineers, PMO

Problem
External systems contain authoritative items but engineering work happens elsewhere.
SDD fix
SDD stores external keys, Polarion references, Jira metadata, and import configuration.
WIIFM
Source systems remain connected to controlled execution.
Context External keys Context Polarion refs Issue Jira metadata

Specification generation from requirements

Available

Architects, implementation teams

Problem
Approved requirements still need technical detail.
SDD fix
SDD generates or stores specifications linked to the requirement and project context.
WIIFM
Implementation teams receive a clear design contract.
Specification Specification Requirement Requirement link Context Assignment

Acceptance criteria coverage model

Available

QA, product owners

Problem
Acceptance criteria are written but not proven.
SDD fix
SDD links criteria to issues, test cases, and execution evidence.
WIIFM
Acceptance stops being a paragraph and becomes a verifiable chain.
Specification Acceptance criteria Test Test links Context Coverage view

4. Planning and controlled execution

Turn specifications into controlled work, process updates, and traceable implementation changes.

Backlog decomposition

Available

PMs, scrum masters, tech leads

Problem
Specifications are not split into executable work.
SDD fix
SDD creates and links issues under specifications and requirements.
WIIFM
Backlog items have a reason, owner, and source.
Issue Issues Context Spec links Context Kanban board

Toolchain issue linking

Available

Implementation teams, PMO, DevOps

Problem
Jira/GitHub/Azure DevOps work items drift from SDD context.
SDD fix
SDD preserves external system IDs, keys, status, priority, and issue links.
WIIFM
Teams can use existing tools without losing traceability.
Issue Jira item Issue GitHub issue Context External status

AI-guided Solve* execution

Available

Implementation teams, AI agents

Problem
AI-assisted changes can ignore project policy or context.
SDD fix
SolveRequirement, SolveSpecification, SolveIssue, and SolveExecution load context and enforce solve rules.
WIIFM
AI implementation becomes reviewable controlled work.
Context Solve command Context Best practices Context Completion comment

Commit and service impact traceability

Available

Developers, release managers

Problem
Software changes are hard to map back to demand and impacted services.
SDD fix
SDD stores Git repositories, commits, issue links, and service impact analysis.
WIIFM
Release review can answer what changed and why.
Context Commit link Issue Issue reference Context Impact report

5. QA, testing, and validation

Build proof continuously while the process is executed.

Test case creation from acceptance intent

Available

QA, analysts

Problem
Tests are created late and miss acceptance intent.
SDD fix
SDD creates test suites and cases linked to requirements, specifications, issues, and risks.
WIIFM
QA starts from business intent instead of reverse-engineering the implementation.
Test Test suite Test Test case Context Trace link

Automated test discovery

Available

QA automation, implementation teams

Problem
Automated tests exist but are not traceable.
SDD fix
SDD scans/imports tests, patches SDD test IDs, and fingerprints methods.
WIIFM
Automated coverage becomes visible in the same matrix as manual tests.
Context xUnit metadata Test SDDTestId Context Method hash

Evidence-based test runs

Available

Testers, validation leads

Problem
Execution proof is separated from test design.
SDD fix
SDD captures step results, evidence, deviations, approvals, and found issues.
WIIFM
Validation evidence is collected as work happens.
Context Run result Context Step evidence Issue Found issue

TPO/TCF protocol control

Available

Validation, quality

Problem
Protocol documents and project test cases diverge.
SDD fix
SDD imports, generates, versions, links, executes, and exports TPO/TCF content.
WIIFM
Protocol evidence remains synchronized with the source project.
Test TPO Test TCF Context Execution session

6. Compliance, risk, and release

Connect controls, releases, and audit evidence.

Risk and control matrix

Available

Quality, safety, validation

Problem
Risks and mitigations are not connected to implementation proof.
SDD fix
SDD models risks, risk-control measures, VMX rows, and trace links.
WIIFM
Risk review can follow the chain into tests and evidence.
Risk Risk Risk Control measure Risk VMX row

Compliance pack traceability

Available

Compliance owners, auditors

Problem
Standards evidence is rebuilt manually.
SDD fix
SDD links clauses to requirements, specifications, issues, design, tests, hazard analysis, and verification.
WIIFM
Compliance artifacts become live project views.
Context Clause Context Matrix entry Context Verification record

External reviewer workflow

Available

Auditors, customers, quality

Problem
External review requires unsafe data sharing or screenshots.
SDD fix
SDD supports scoped reviewer invitations and events.
WIIFM
External parties can review the right evidence with a controlled boundary.
Context Invitation Context Scope Context Reviewer events

Release evidence and exports

Available

Release managers, quality

Problem
Release readiness depends on scattered proof.
SDD fix
SDD connects releases, test runs, generated protocols, traceability exports, and issue links.
WIIFM
Release decisions are based on linked evidence.
Context Release Context Export Context Traceability

7. Continuous improvement and operations

Keep learning loops connected to the original business demand.

Issue triage from test or production findings

Available

Support, QA, implementation teams

Problem
Defects are reported without requirement context.
SDD fix
SDD links found issues to test runs and affected requirements/specifications.
WIIFM
Fixes remain connected to the business expectation they violated.
Issue Found issue Context Run link Context Affected spec

Change request workflow

Available

Product owners, quality, PMO

Problem
Late changes overwrite history.
SDD fix
SDD records change requests and lifecycle-aware reasons for controlled edits.
WIIFM
Teams can evolve scope without destroying the audit trail.
Context Change request Context Reason Context Status

Best-practice memory and prompt versioning

Available

Architects, tech leads

Problem
Lessons learned stay in individual heads.
SDD fix
SDD stores searchable best practices and can publish improved prompt versions with lineage.
WIIFM
Agents and teams reuse the best known way to solve similar work.
Context Best practice Context Version Context Lineage

Sandbox and enterprise rollout controls

Available

IT, security, platform teams

Problem
Testing automation can affect production data or ignore enterprise boundaries.
SDD fix
SDD supports sandbox isolation, plan entitlements, API access, and corporate deployment options.
WIIFM
The platform can scale from trial to controlled enterprise adoption.
Context Sandbox scope Context Entitlements Context Isolated VM