Concept
What RCF covers, and what it doesn’t
RCF covers the build phase: from an agreed product requirements document (PRD) and technical architecture document (TAD) to a shipped feature with traceability. Upstream agreement and downstream deployment gates are on the roadmap.
Last updated
This page defines the current scope so teams can assess where RCF applies to their projects.
The wider lifecycle, at a glance
RCF covers the highlighted stages of the software lifecycle:
Discovery → Shaping → PRD/TAD agreement → Build sequence → FBS → Build cycle → Deploy gates → Operate and Learn → loop back into shaping.
The bold span is where the methodology currently focuses. PRD/TAD agreement (upstream) and deploy gates (downstream) are on the RCF roadmap; the chain extends in both directions as those workstreams ship. Discovery, shaping, and operate-and-learn sit outside the methodology entirely. Operate-and-learn lives with the digital operator, a separate Stravica concept that runs alongside RCF rather than inside it.
What is in scope
RCF starts with an agreed and approved PRD and TAD. It covers building, testing and shipping a feature with traceability from a business decision to the code that satisfies it.
The code that satisfies a criterion is a node in the chain. It records the implementing file or symbol and links to the acceptance criteria. Validation checks that the reference still resolves against the working tree.
The document chain defines the artefacts. The build cycle defines the stages of work. The AC-as-contract rule makes intent machine-checkable. The traceability rules keep these relationships queryable as the project changes. Together, these parts provide a substantially complete build method that has been used on real projects.
What is deliberately out of scope
Work before PRD and TAD agreement and work after shipping are deliberately outside the current scope.
Upstream: discovery and PRD/TAD agreement
Everything that happens before the PRD and TAD are agreed. The discovery work that identifies a product worth building, the multi-stakeholder negotiation that turns a vague idea into a structured PRD, the architectural shaping that turns a PRD into a TAD. The role-mix that does that work properly: product management, design, technical architecture, compliance, infrastructure, security, devops, sometimes legal, sometimes finance. None of that is in the current pages.
Upstream agreement involves several roles and stakeholders. An RCF project has one owner, but many roles contribute to its PRD and TAD. The roadmap includes separate pages and tooling for this agreement process, including the human signature at approval gates.
Downstream: PR, merge, deploy gates (and operate-and-learn beyond)
Two distinct things live downstream of the build cycle. First, the gates that turn a tests-green slice into a feature actually running in production: PR review, merge protocol, CI pipelines, deployment mechanics, the deploy-gate audit trail. Second, operate-and-learn: monitoring, alerting, on-call, incident response, and the feedback loop that turns telemetry from a shipped feature back into the next slice’s requirements.
The deploy-gates piece is on the RCF roadmap. The chain extends naturally past the build cycle’s Finalise stage; making PR / merge / deploy gates first-class participants in the trace is the next workstream below the build cycle. RCF assumes a green CI run before Finalise commits today, but it doesn’t yet prescribe how the gates beyond that work.
Operate-and-learn is not on the RCF roadmap. That work lives with the digital operator, a separate Stravica concept that sits alongside the methodology rather than inside it. RCF describes how to build software; the digital operator describes how the role that runs and learns from it gets done. The two compose at the loop-back from operate back into shaping. They are not the same project.
Teams can use the CI, deployment and operations stack that suits their project. RCF connects to it at Finalise today. The planned deployment gates will extend that connection.
What that excludes for certain project types
RCF applies differently depending on whether the project already has an agreed PRD and TAD.
Platform and infrastructure work. Often there’s no classical PRD because there’s no end-user surface. RCF still applies once you decide what the platform is for and what it must do: that becomes the PRD, and the rest of the chain runs the same. The shape of the requirements changes (more non-functional, fewer user stories that look human-shaped); the mechanism doesn’t. The upstream work of writing that PRD is what’s missing.
Research and exploration. Work that tests whether an idea is worth pursuing sits upstream of RCF. Build a prototype, learn from it and discard it if appropriate. RCF applies when the result is ready to become a product. An exploratory spike does not need the full document chain.
Bug fixes and security patches. A single-AC slice through the existing chain, run through the normal build cycle, against the AC the bug exposed. RCF covers this; the surface is smaller because the upstream work was done when the original feature shipped. If the bug exposes a missing AC, write the AC, then fix the code against it. The chain accumulates as you touch it.
Open source and consulting work. RCF applies once the purpose of the work is agreed. Maintainers and contributors, or clients and stakeholders, make the upstream decisions. The build process stays the same.
The build process stays the same across project types. Upstream work varies until the team agrees the PRD and TAD. RCF has limited coverage before that agreement; the next workstream extends it.
Why ship the build-side first
RCF starts with the build phase for two reasons.
First, AI agents already carry out build work, where verifying their output is an immediate concern. The document chain, build cycle and AC-as-contract rule address that concern. Starting elsewhere would have left this work without those safeguards.
Second, upstream agreement and downstream deployment gates require broader work. PRD and TAD agreement involves organisational roles, authority and accountable approval. Deployment gates affect CI/CD and the audit trail from tested code to a deployed feature. Both need substantial treatment.
What this means for the trust mechanism
AI can draft acceptance criteria. If another AI writes the code and tests, human approval needs explicit standards to avoid approving an unverified chain of AI outputs.
Approval gates apply throughout the chain: PRD approval, TAD approval, AC review, FBS sign-off and test review. Theatre risk and the human signature explains how these gates tie approval to standards and recorded gaps.