Back to Bytes

Generate architecture governance compliance report for stakeholders — lab audio overview

2026-04-21

Build a compliance reporting system that aggregates ADR data, coverage, reviews, and staleness into a weighted compliance score with executive summaries and detailed breakdowns.

GenAI Solutions Architecture › GenAI Architecture & Design Patterns › Chapter 1 · GenAI ADR Engine › Create ADR governance dashboard and compliance audit

5:14
Build a compliance reporting system that aggregates ADR data, coverage, reviews, and staleness into a weighted compliance score with executive summaries and detailed breakdowns.
Share

More from this chapter

Transcript
Host: Welcome back. You're in GenAI Architecture and Design Patterns — a course about the structural choices behind production AI systems. This chapter is about something called an ADR Engine. ADR stands for Architecture Decision Record — basically, a written record of a big technical choice and the reasoning behind it. Why does this discipline matter? Because when your team picks one model over another, or chooses to fine-tune instead of using retrieval, those decisions shape cost and risk for years. Expert: Right, and let me paint the scenario that makes this exercise click. Imagine you're at a mid-sized company — maybe two hundred engineers, a dozen GenAI projects running in parallel. One team picked a big expensive model for a chatbot. Another team quietly switched to a cheaper model last quarter but never wrote it down. A third team is fine-tuning when retrieval would've worked fine. Now your Chief Technology Officer walks into the Monday meeting and asks one question: "Are we governed? Are our AI architecture decisions documented, reviewed, and current?" And nobody can answer. Somebody opens a spreadsheet, somebody else opens a wiki, and the meeting dies. This is the exact pain this exercise solves. You're going to build the thing that answers that question automatically — a single report that tells leadership, in numbers and plain English, how healthy your architecture governance actually is. Every company past the demo stage hits this wall. Host: So this is exercise three of three in this objective, and it's the final one. In the previous exercise, you built a review workflow — the piece that handles approvals, checks that the right people signed off, and tracks when a decision is about to expire. Now you're taking that and rolling it up. So what exactly are we building this time? Expert: You're building a compliance reporting system. In plain language, it's a piece of software that looks at every architecture decision your organization has recorded, pulls in the review status and the approval history from the work you did last time, and then produces a single report card with a score on it. The report has two layers. The top layer is an executive summary — short, readable, the kind of thing you'd paste into a slide for leadership. The bottom layer is the detailed breakdown — every decision, its status, what's missing, what's stale. Now here's the key idea, the conceptual "aha." The score isn't a simple average. It's a weighted score. You're combining four different signals: coverage — meaning, are the big decisions even written down; review status — have the right people approved them; staleness — how old is the decision and is it still valid; and category balance — are you documenting model choices as carefully as hosting choices. Each of those four signals carries a different weight because they don't matter equally. A decision that's undocumented is worse than a decision that's slightly stale. Think of it like a credit score for your architecture — multiple factors, weighted by importance, rolled into one number a human can act on. Host: That weighted scoring sounds like exactly where people get stuck. Before someone starts coding, what's the tricky part to watch out for? Expert: The trap is treating all four signals as equal. Engineers have a reflex to average things — add them up, divide by four, done. Resist that. The whole point of weighting is that a missing decision damages trust more than an aging one. So before you write the scoring logic, pause and decide your weights deliberately — write them down as named constants at the top of your code so a reviewer can see the policy at a glance. Second tip: make the executive summary genuinely short. Three or four sentences, a headline score, and the two biggest risks. If your summary is a wall of text, nobody reads it and the whole report fails its job. The detailed breakdown is where the depth goes — keep the summary ruthless. Host: Good. So what will you actually be able to do when you finish this, and where does it leave you? Expert: After this exercise, you'll be able to take a pile of raw architecture decisions, review histories, and timestamps, and turn them into a single governance report that a non-technical executive can read in thirty seconds — with a drill-down that a technical lead can audit line by line. That's a real capability. For your team, this is the kind of building block that turns architecture governance from a quarterly panic into a weekly dashboard. You can wire this into a scheduled job, post the score to a channel every Monday morning, and suddenly governance is continuous instead of reactive. And because this is the final exercise in the objective, when you finish it you'll have the complete ADR Engine — the capture piece, the review workflow, and now the reporting layer. That's a working governance system you can genuinely bring into your team's architecture discussions and say, "here's how we'll track this from now on." Thanks for listening, and good luck with the build.

Want to go deeper? Explore disciplines with hands-on labs, quizzes, and chapter podcasts.