معماری چندکسبوکاری، تجاری و تجارت الکترونیک · فصل ۲ — ICP، Serviceability، Pilot، Workload و Admission · 229
Serviceability Policy
Design a serviceability policy that tests hard constraints before commercial enthusiasm, records region, dependency, quota, capacity, support and compliance evidence, and returns SERVICEABLE, CONDITIONAL, UNSERVICEABLE or HOLD with explicit exception authority. میتواند برای «Serviceability Policy» یک تصمیم bounded با constraints، cost/risk و stop/pivot condition طراحی کند.
Lesson summary
Design a serviceability policy that tests hard constraints before commercial enthusiasm, records region, dependency, quota, capacity, support and compliance evidence, and returns SERVICEABLE, CONDITIONAL, UNSERVICEABLE or HOLD with explicit exception authority.
میتواند برای «Serviceability Policy» یک تصمیم bounded با constraints، cost/risk و stop/pivot condition طراحی کند.
This lesson produces
میتواند برای «Serviceability Policy» یک تصمیم bounded با constraints، cost/risk و stop/pivot condition طراحی کند.
Who it is for
Foundation
Use a field map, one worked scenario and explicit state vocabulary before independent construction.
Repair
Identify the failed evidence dimension, use the smallest mutated fixture and rerun only the affected gate.
Experienced
Compress definitions; require trade-off defense, counterexample analysis and changed-context transfer.
Prerequisites
1) Serviceability comes before commercial enthusiasm
A lead can be attractive and still be impossible to serve safely or reliably. Serviceability Decision Policy v1 asks a narrower question before scoring the opportunity: can the current product and operating model meet the declared Region, data, integration, quota, capacity, support and compliance constraints with evidence that exists now?
2) Turn requirements into hard constraints
Write every requirement as a testable field: required Region, service availability, data residency, connector dependency, forecast peak, quota headroom, tested capacity, support response, latency and compliance. A vague statement such as “engineering can probably handle it” is not evidence.
3) Region is an evidence dimension, not a preference
AWS Well-Architected notes that Region choice affects workload KPIs such as performance and cost. For this lesson, the Region requirement is therefore explicit. The AWS fact does not decide MAKNOW commercial eligibility; it only shows why Region cannot be hidden inside a generic architecture preference.
4) Availability and integration must exist now
A service or connector that is planned, private-preview only, unsupported in the required Region, or not evidenced is not present capability. If the dependency is decisive and evidence is missing, return HOLD; if it is explicitly unavailable with no bounded exception path, return UNSERVICEABLE.
5) Quota headroom must be compared with forecast peak
AWS documents quotas as account- and often Region-specific and recommends continual assessment. Record the quota scope and compare available headroom with the declared peak requirement. If the headroom is below the peak and no approved increase exists, the hard constraint fails.
6) Capacity evidence needs freshness
Quota permission is not the same as tested throughput. Record the most recent capacity/load evidence and its age. When decisive capacity evidence exceeds the declared freshness window, preserve STALE rather than treating an old successful test as current proof.
7) Support and compliance are service constraints
Support response windows, data residency and compliance commitments can block an otherwise attractive architecture. Do not hide them inside an aggregate score. A two-hour customer requirement is not satisfied by a four-hour current operating window unless a bounded and approved mitigation closes the gap.
8) Exceptions need owner, cost and expiry
A conditional exception is a temporary operating commitment, not a sentence saying “we will fix it later.” Record the accountable owner, incremental cost, expiry, evidence reference and exact constraint being mitigated. If owner or expiry is missing, the exception is not valid.
9) Use typed states instead of forced optimism
SERVICEABLE means hard constraints pass without an active exception. CONDITIONAL means all hard constraints can be met only through a current, owned, costed and time-bounded exception. UNSERVICEABLE means a hard constraint fails. HOLD, PARTIAL, DISPUTED, STALE and BLOCKED preserve different evidence failures instead of flattening them into “maybe yes.”
10) Baseline Serviceability Decision Policy
| Opportunity | Region | Availability | Data Residency | Integration | Quota Headroom | Capacity | Support Window | Latency | Compliance | Owner | Exception Cost | Expiry | Evidence Age | State |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| OPP-EU-042 | eu-central-1 | AVAILABLE | EU_REQUIRED_AND_MET | SUPPORTED | 140 units vs 100 peak | 120 tested vs 100 peak; age 7d | 4h required / 2h current capability | <=120ms requirement / 92ms evidence | PASS | platform-ops | 0 | N/A | 7d max 30d | SERVICEABLE |
The worked baseline is serviceable because Region/service availability, residency, connector, quota, capacity, support and compliance all pass with current evidence. No exception is needed and its cost is therefore zero.
11) Wrong shortcut: quota below forecast peak
If required peak throughput is 100 units while Region/account quota headroom is only 80, the opportunity is not currently serviceable. Sales urgency and a high lead score cannot override the hard constraint. A future quota request is a remediation plan, not current proof.
12) Missing connector evidence and expired exceptions
Removing evidence for a required connector forces HOLD; inventing support is forbidden. If an exception for a partial dependency has expired while the underlying gap remains, the decision becomes UNSERVICEABLE until new authority/evidence is established.
13) Lab: eight fixtures, 64 assertions
The offline lab evaluates a clean baseline, quota failure, missing connector evidence, missing exception owner, expired exception, stale capacity evidence, an unrecomputed material change and the transfer scenario. Every fixture emits eight deterministic fields and requires no API key or live tenant.
14) Transfer: connector GA, tighter quota and shorter support window
Recompute from the changed evidence. The connector is now generally available, quota headroom is reduced but still above the declared peak, and the customer requires a two-hour response while current operations provide four hours. A named on-call mitigation costs 1,200 units per month and expires on a declared date, so the bounded state becomes CONDITIONAL, not automatically SERVICEABLE.
15) Delivery checklist
All hard constraints are explicit; Region/account scope is visible; availability and integration are current; quota is compared with forecast peak; capacity evidence freshness is checked; support/compliance are separate gates; every exception has owner/cost/expiry; typed non-success states are preserved; transfer is recomputed; and no external platform guidance is treated as MAKNOW commercial authority.
Assessment
There is no answer key in this lesson pack; answer it yourself and mark honestly. "Needs review" sends the lesson to your review queue.
ARC-010-S1 retrieval
State the owned boundary of Serviceability Policy and name one adjacent non-goal.
ARC-010-S2 application
Build Serviceability Decision Policy v1 for the baseline evidence.
ARC-010-S3 diagnosis
Quota headroom falls below the forecast peak. Identify the invalidated constraint and bounded state.
ARC-010-S4 transfer
The connector becomes GA, quota ceiling changes and the support response requirement shortens. Recompute the state and exception cost.
Assessment rubric
Blocking dimensions: scope boundary; exact evidence binding; negative evidence; bounded decision; transfer recomputation. A sufficient response keeps FACT / INFERENCE / DESIGN separate, preserves typed uncertainty, and never treats planned work as current capability.
References & freshness
Case studies
Lesson visuals
Lab files
دستور python run_checks.py را Offline اجرا کنید. برای هشت Fixture توضیح دهید کدام Hard Constraint یا Exception Gate State را کنترل میکند. کار برنامهریزیشده هیچوقت بهعنوان قابلیت فعلی حساب نمیشود.