End-to-End AI SDLC Workflow
The framework, phases, gates, and traceability that hold the pipeline together.
Module Overview
Module 2 is the spine of the program: the end-to-end AI-augmented SDLC framework that every other module plugs into. You learn the six delivery phases, who owns each artifact, what a real quality gate looks like, and how traceability holds the chain together — then you start producing your Week 1 artifacts. By the end you know what “done” means at the Week 1 gate before you sit down to draft.
| At a glance | |
|---|---|
| Covers | The six SDLC phases; artifact ownership; quality gates and the verification ladder; BRD/PRD quality bars; traceability; the Evaluate → Plan → Apply → Validate cycle |
| When it runs | Week 1 Monday (in-person), alongside Module 3 |
| Builds on | Module 1 (tools and project set up) |
| Leads into | Week 1 production of the BRD and PRD; the Requirements Sign-Off gate |
What you'll produce
Across Week 1: an approved Business Requirements Document (BRD) and Product Requirements Document (PRD) for your sample project, with a clean BRD ↔ PRD traceability chain — signed off at the Friday Requirements Sign-Off gate.
The Four Answers
This module is the spine of the program. Once you can answer these four questions reflexively for any project, AI becomes a force multiplier instead of a wildcard.
| Question | Where to find the answer |
|---|---|
| Which phase am I in, and what’s my entry condition? | Part 2 — The 6 Delivery Phases |
| What artifact do I owe, who reviews it, and what’s the bar? | Part 5 — Quality Bars + the role table |
| Which gate must I pass before handing off? | Part 3 — Quality Gates |
| How does my work trace back to the BRD and forward to code? | Part 4 — Traceability |
Part 1 — Framework Foundations
The Four Principles
| Principle | What it means |
|---|---|
| AI Augments, Humans Decide | Every AI output passes through human review. Anyone can press the keys; only the named owner signs off. |
| Structure Before Speed | Invest in artifacts before engineering. The BRD, PRD, Architecture, and Dev Tasks are the substrate AI uses to produce useful code. Skip them and you pay in Week 3. |
| Continuous Validation | Quality gates are distributed across phases, not deferred to the end. Fix Week 1 problems at Week 1’s gate — not in Week 3. |
| Traceability as First-Class | Every feature traces: BRD → PRD → Architecture → Dev Tasks → code → tests. A broken chain is a gap to fix, not ignore. |
The Universal Working Cycle
Every AI-assisted task follows the same four steps. The artifacts change; the cycle doesn’t. When something goes wrong, it’s almost always because one step was skipped — diagnose which one, and that’s your fix.
| Step | What you do |
|---|---|
| Evaluate | Understand what you’re working with before touching anything. Read the artifact, spec, constraints. Identify gaps, risks, ambiguities. |
| Plan | Before prompting for output, prompt for a plan. Review it. Correct misalignments at plan time — not after 45 minutes of generation. |
| Apply | Execute. Produce the artifact. Stay grounded in the plan. If the AI drifts, stop and redirect — don’t let it run. |
| Validate | Verify against the quality bar before moving on. Run the checklist, the tests, the gate. Only then: done. |
The Five Pillars
| Pillar | What it covers |
|---|---|
| I — Roles & Accountability | Who owns what. Each artifact has exactly one named owner who signs off. |
| II — Artifact Governance | The structured documents connecting phases. Each has a template, a quality bar, and an owner. |
| III — AI Integration Layer | Where AI is applied (drafting, reviewing, generating) and where it’s gated (human review, sign-off). |
| IV — Phase Model | The 6 sequential phases, each with entry conditions, activities, outputs, and an exit gate. |
| V — Quality & Validation | Gates, peer reviews, acceptance criteria, self-checks. Quality distributed across the timeline. |
Part 2 — The 6 Delivery Phases
Each phase has the same shape: an entry condition, key activities, an output, and a gate that must pass before the next phase starts. The training covers Phases 1–4 hands-on; Phases 5–6 are introduced so you understand the whole pipeline.
| Phase | Output | Gate | Owner |
|---|---|---|---|
| 1 — Requirements | Approved BRD + PRD with user stories, acceptance criteria, UI/UX direction | Requirements Sign-Off | Solutions Designer (BRD), Product (PRD) |
| 2 — Architecture | Approved Architecture Document + finalized ADRs | Architecture Review | Solutions Architect |
| 3 — Design | Approved high-fidelity designs + component spec | Design Review | Product Mgr / Designer |
| 4 — Development | Working code matching acceptance criteria + passing unit tests | Code Review + Sprint 1 Readiness | Developers (Tech Lead reviews) |
| 5 — Testing & QA | Test plan, executed cases, defect log, QA sign-off | QA Sign-Off | QA Lead (separate training) |
| 6 — DevOps | Deployed app, CI/CD pipeline, monitoring | Production Readiness | DevOps (separate training) |
Training mapping
Week 1 → Phases 1–2 (Requirements + early Design). Week 2 → Phases 2–3 (Architecture + Dev Tasks). Week 3 → Phase 4 (Development). Phases 5–6 get deep treatment in QA and DevOps role-specific training later.
Part 3 — Quality Gates & Handoffs
Every phase ends with a gate. Passing it lets the next phase start. Failing it sends work back into the current phase — never forward. A gate is three things at once: a checkpoint (is the artifact complete?), a handoff (is the next role ready to receive it?), and a commitment (downstream work proceeds based on this). What triggers a gate is the handoff and sign-off — not the calendar. This training schedules gates on Fridays so the rhythm is predictable, but the rule is that the next phase can’t begin until the prior phase’s owner has signed off and handed over. On a real project the day moves; the dependency does not.
You’re handing this off — not presenting
Each gate is a real handoff: the signed BRD becomes the Architect’s input, the signed PRD becomes the Tech Lead’s Dev Tasks input, and so on down the chain. The next role builds on what you sign off — weak upstream artifacts poison everything downstream. The gate lands on Friday in this training, but it exists because the next phase consumes your output, not because it’s Friday. Get the artifact right, not the date.
The Three Gates in This Training
| Scheduled | Gate | Pass criteria | What it unlocks |
|---|---|---|---|
| Week 1 Fri | Requirements Sign-Off | BRD + PRD approved. Acceptance criteria clear. UI/UX direction set. | Architecture work in Week 2 |
| Week 2 Fri | Architecture Review + Dev Handoff | Architecture + ADRs approved. Dev Tasks generated and reviewed. | Implementation in Week 3 |
| Week 3 Fri | Code Review + Sprint 1 Readiness | Code merged. Unit tests passing. Tech Lead approves. | Sprint 1 (post-training) |
Gate failed? Go back, not forward
A failed gate doesn’t mean the team failed — it means the artifact isn’t ready, so the next phase doesn’t start yet. The fix goes back into the current phase until the owner can sign off and hand over. Pushing a failed artifact forward to stay on schedule is exactly what produces broken pipelines and Week 3 chaos — a slipped handoff is cheaper than the rework it prevents.
Part 4 — Traceability
Every feature can be walked end-to-end. Every step references the one before it — the chain is unbroken.
BRD requirement
→ PRD user story
→ Architecture decision
→ Dev Task
→ code
→ unit test
How It Shows Up in Practice
| Artifact | Reference format |
|---|---|
| BRD requirements | Numbered: BR-01, BR-02, … |
| PRD user stories | “US-05 (Delete Task) addresses BR-03 (Task Lifecycle Management)” |
| Architecture sections | “This authentication design supports US-01 through US-04” |
| Dev Tasks | “T-024: PATCH /api/tasks/:id — implements US-09 (Edit Task)” |
| Commit messages | “T-024: Implement PATCH /api/tasks/:id with validation” |
| Tests | describe('PATCH /api/tasks/:id (T-024)', …) |
Why It Matters
| Benefit | What it gives you |
|---|---|
| Change impact | When a BRD requirement changes, you see exactly which stories, tasks, code, and tests need updating. |
| Coverage | At Week 3 Friday, you can prove every BRD requirement reached working code — or flag gaps explicitly. |
| Debugging | When something breaks, walk back from failing test → Dev Task → user story → BRD to understand intent. |
| Onboarding | New people read the chain and understand why every line of code exists. |
Part 5 — Quality Bars
Gates verify artifacts against a concrete quality bar — not gut feel. Below are the verification ladder and the Week 1 bars (BRD, PRD). Architecture/ADR/Dev Tasks bars come in Module 4; Code/Test bars in Module 5.
The Verification Ladder
Every artifact passes three layers before approval. Each catches what the others miss.
| Layer | Who | Catches |
|---|---|---|
| 1 — Self-check | Artifact owner | Obvious gaps. Cheap, fast. Walk the quality bar yourself before declaring ready. |
| 2 — Peer review | Most-affected downstream role | Implicit assumptions, missing handoff context the owner can’t see. |
| 3 — Gate review | Cohort + facilitator | Cohort alignment. Sign-off form filled, verdict recorded. |
BRD Quality Bar
The BRD answers “what does the business need and why?” — in business language, not technical. Everything downstream traces back here.
Checklist
- Every business requirement has a unique numeric ID (BR-01, BR-02, …)
- Every requirement is in business language, not technical solutions
- Every named stakeholder has at least one requirement addressing their concern
- Constraints are specific and quantified (“3-month timeline” not “tight timeline”)
- Success criteria are measurable (numbers, dates, observable outcomes)
- No requirement starts with “the system shall” — that’s PRD/architecture territory
- Scope explicitly lists what’s out of scope, not just what’s in
- Assumptions and risks are surfaced, not hidden inside requirement text
Common failure modes
Solutioning in the BRD (“we need a Redis cache” — that’s architecture).
Vague requirements without acceptance hooks (“the app should be fast”).
Missing stakeholders (the loud one is documented; the quiet ones aren’t).
Constraints buried in narrative instead of called out.
Success criteria that can’t be measured.
PRD Quality Bar
The PRD answers “what does the product do, for whom, and how do we know it’s working?” The Tech Lead and Architect use it to break down work and design the system.
Checklist
- Every user story has a unique ID (US-01, US-02, …)
- Every user story is “As a {role}, I want {action}, so that {outcome}”
- Every user story references the BRD requirement(s) it addresses (US-05 → BR-03)
- Every user story has at least 2 acceptance criteria
- Acceptance criteria are testable (a QA reviewer can verify each one)
- Wireframes exist for the 3 most critical flows
- Non-functional requirements are quantified (“p95 < 500ms” not “fast”)
- Every BRD requirement is covered by at least one user story (no orphans)
- Out-of-scope is explicit, not just “everything else”
Common failure modes
User stories without acceptance criteria.
Acceptance criteria written as solutioning (“the system uses JWT”) instead of behavior (“successful login returns a session valid for 24 hours”).
Wireframes for happy paths only — no error or empty states.
BRD requirements not covered by any user story.
Non-functional requirements left as “TBD” or absent.
Cross-Artifact Traceability Check (Week 1 Gate)
Run this at the Week 1 gate — and during Wed–Thu peer review, not just Friday.
- Every BRD requirement (BR-XX) is addressed by at least one user story (US-YY)
- Every user story references the BRD requirement(s) it addresses
- No user story addresses a requirement that isn’t in the BRD (no scope creep)
- PRD constraints align with BRD constraints (no contradictions)
- The BR → US mapping is documented where a reviewer can find it quickly
Part 6 — Producing Your Week 1 Artifact
This is where AI does the work. The Evaluate → Plan → Apply → Validate cycle applies to artifact production. Below are the prompt sequences for the BRD (Solutions Designer) and PRD (Product). Other roles produce review notes — see the role table.
Your reference materials: inputs and a completed example
The training demonstrates BRD/PRD production on the LMS (a Leave Management System for a fictional client, Meridian Corp) — the worked example you follow, not the project you build. You build one of the ten sample-project library projects (LeaveTrack, ExpenseFlow, and so on). Whichever you picked, these LMS materials are your reference. Everything below is in the training repo: github.com/strat-training/ai-sdlc, under sample-project/.
Inputs to work from — sample-project/source-docs/: rfp.md (the client’s request for proposal), estimation-sheet.csv (scoped features and pre-sales estimates), and solutions-document-example.md (the reference for the Solutions Document the SA writes before the BRD).
Completed reference to match against — sample-project/source-docs/demo-output/: a full, worked artifact chain for the same project — BRD, PRD, Architecture Document, ADRs (E001–E008), Dev Tasks, and a generated Figma prototype. Use it to check the depth, structure, and traceability your own artifacts should reach. It is a reference for comparison, not something to copy — your job is to produce your own and see how it measures up.
Lean on Module 3
These prompt sequences assume the prompting craft from Module 3 (Prompt Engineering Fundamentals), taught alongside this module. If your output isn’t hitting the quality bar, the fix is usually there: prompt structure (Role + Context + Task + Format + Constraints), the right technique (least-to-most for long documents), and the refinement loop. Keep the Module 3 handbook open while you draft.
Start from the official Stratpoint system prompts
Don’t write your generator prompts from scratch. The Ultimate AI Agents browser hosts vetted starting points:
• solarch-brd-generator — the system prompt for drafting a BRD
• product-manager — the system prompt for drafting a PRD
These agents are the org-standard baselines. On a web chatbot you don’t invoke them from the browser — you create a persistent container that holds the system prompt and converse with that: a Claude.ai Project (custom instructions), a Gemini Gem (System Instruction), or a Custom GPT. The agent browser at https://ultimate-ai-agents.stratpoint.io/browser is the copy source. In Claude Code, install once and invoke @agent-name. Refine them for your project, and contribute improvements back.
Minimum-viable AI hygiene for Week 1
Load the right context, not all of it. BRD work: the RFP + estimation sheet + Solutions Document (and a prior BRD as a quality reference). PRD work: the approved BRD + UX research. Don’t load the entire repo.
Three corrections, then start fresh. If you’ve corrected the AI three times on the same mistake, that’s a context problem — new session, reload context, restate the task. (Module 4 teaches surgical recovery.)
Producing the BRD (Solutions Designer)
Before you start (setup — do this yourself, don’t paste it)
1. Set up the agent. Load solarch-brd-generator as your system prompt — create a Claude.ai Project or Gemini Gem and paste the agent into its instructions (copy it from the agent browser), or @solarch-brd-generator in Claude Code. The Project/Gem persists; set it up once.
2. Load context. For the sample project, the inputs live in sample-project/source-docs/: rfp.md (the client’s RFP), estimation-sheet.csv (scoped features and estimates from pre-sales), and solutions-document-example.md (the reference for the Solutions Document the SA writes first). The flow is: SA writes the Solutions Document from the RFP, then feeds the Solutions Document + Estimation Sheet into the BRD agent. For your reference quality bar, use the completed BRD in source-docs/demo-output/BRD/ (from the training repo github.com/strat-training/ai-sdlc, at sample-project/source-docs/demo-output).
3. Then send the prompts below, one at a time.
Send — Evaluate
[EVALUATE]
Before drafting anything, analyze the loaded RFP,
estimation sheet, and solutions document, and identify:
1. Who are all the named stakeholders?
2. What business problem does this project solve?
3. What constraints are stated (timeline, budget, compliance)?
4. What’s ambiguous or missing from the inputs?
List the gaps. Don’t draft yet.
[PLAN]
Plan the BRD structure before writing:
- Executive summary, business context, scope
- Functional requirements grouped by capability area
- Non-functional requirements (quantified)
- Stakeholders mapped to requirements
- Constraints, assumptions, success criteria
Confirm: every stakeholder will have a requirement,
every requirement will get a unique BR-XX ID.
[APPLY]
Draft the BRD following the plan.
Rules:
- Business language only — no technical solutioning
- Number every requirement BR-01, BR-02, …
- Quantify constraints and success criteria
- List out-of-scope explicitly
- Surface assumptions and risks separately
Match the depth and structure of the reference BRD in
source-docs/demo-output/BRD/.
[VALIDATE]
Run the BRD quality bar checklist against this draft.
For each item: PASS or FAIL with the specific gap.
- Unique numeric IDs on every requirement?
- Business language, no solutioning?
- Every stakeholder has a requirement?
- Constraints quantified? Success criteria measurable?
- Out-of-scope explicit?
Fix every FAIL before declaring ready for peer review.
Producing the PRD (Product Mgr / Designer)
Before you start (setup — do this yourself, don’t paste it)
1. Set up the agent. Load product-manager as your system prompt — a Claude.ai Project or Gemini Gem with the agent pasted in, or @product-manager in Claude Code.
2. Load context. The approved (or in-flight) BRD, UX research, and the RFP in source-docs/. For your reference quality bar, use the completed PRD in source-docs/demo-output/PRD/ (from the training repo github.com/strat-training/ai-sdlc).
3. Then send the prompts below, one at a time.
Send — Evaluate
[EVALUATE]
Before drafting anything, analyze the loaded BRD and
research and identify:
1. Every BRD requirement that needs a user story
2. The user roles/personas interacting with the product
3. The critical flows that need wireframes
4. Non-functional requirements implied by the BRD
[PLAN]
Plan the PRD before writing:
- User stories mapped to BRD requirements (US → BR)
- Which 3 flows get wireframes
- Acceptance criteria approach (behavior, not solutioning)
- NFR targets to quantify
Confirm: every BRD requirement will map to ≥1 user story.
[APPLY]
Generate user stories from the BRD requirements.
For each story:
- Form: “As a {role}, I want {action}, so that {outcome}”
- Unique ID: US-01, US-02, …
- Reference the BRD requirement(s): US-05 → BR-03
- At least 2 testable acceptance criteria (behavior, not tech)
Refine acceptance criteria yourself — don’t accept AI’s
first pass. Quantify NFRs. Generate wireframe descriptions
for the 3 critical flows (Figma Make output is fine).
[VALIDATE]
Run the PRD quality bar AND the traceability check.
PRD bar:
- Every story has an ID, the right form, ≥2 testable ACs?
- NFRs quantified? Wireframes for 3 critical flows?
Traceability:
- Every BRD requirement covered by ≥1 user story?
- Every story references its BRD requirement?
- No story addresses a requirement not in the BRD?
Fix every FAIL before peer review.
Week 1 Deliverable by Role
Same exercise, different artifact per role. All branches feed Friday’s gate review. BRD and PRD owners use the prompt sequences in Part 6; reviewers produce notes committed to docs/reviews/.
| Role | Deliverable | Committed to |
|---|---|---|
| Solutions Designer | BRD — owns it. Draft, refine, validate stakeholder coverage. | docs/brd/ |
| Product Mgr / Designer | PRD + wireframes for 3 critical flows. Owns it. | docs/prd/ |
| Project Manager | PRD completeness review — missing ACs, ambiguous stories, scope risks. | docs/reviews/week1-pm-review.md |
| Solutions Architect | Tech feasibility review — risks, integration complexity, architecture-affecting decisions. (Architecture production with the solution-architect agent comes in Week 2.) | docs/reviews/week1-sa-review.md |
| Tech Lead | PRD sizing + risk review — size each story, flag risks and implicit complexity. | docs/reviews/week1-tl-review.md |
| Developers | PRD buildability review — can I build this? What’s missing? What would I ask upstream? | docs/reviews/week1-dev-review.md |
| QA / DevOps | Lens review — testability (verifiable ACs?) / deployability (env, scale, residency?). | docs/reviews/week1-{qa|devops}-review.md |
Contribute back
Whatever prompts you refine while producing Week 1 work, commit the cleaned-up version to your project’s knowledge/prompts/{your-role}/. This is how the next cohort starts ahead of yours.
The Week 1 Deliverable
| What | Approved BRD + PRD on your chosen sample-project (the LMS is the worked demo) |
| Quality bar | The BRD and PRD checklists in Part 5. The completed reference artifacts in source-docs/demo-output/ are the reference depth. |
| Verification | Self-check → peer review (mid-week) → gate review (Friday) |
| Sign-off form | Create docs/reviews/week1-friday-signoff.md in your project from the gate sign-off template; fill it in at the gate |
| Gate | Requirements Sign-Off. Pass = every checklist item passes, BRD ↔ PRD traceability clean, all reviewer sign-offs collected |
| Unlocks | Week 2 Architecture + Dev Tasks work |
Self-Check
- I can name the four principles and explain why each matters.
- I can list the six phases in order and name the gate at the end of each.
- I know which artifact my role owns at each phase — and which I review.
- I can trace any feature in the reference chain (source-docs/demo-output/) from BRD to deployed code without gaps.
- I understand gates are real handoffs — passing one means the next phase can start.
- I know the verification ladder (self-check → peer review → gate review) and what each layer is for.
- I can run the BRD and PRD quality checklists and land on a verdict.
- I know how the Week 1 traceability check (BRD ↔ PRD) is run and where the sign-off form lives.
- I can load minimum-viable context without over-stuffing, and I know when to start a fresh session.
- I’ve identified my Week 1 deliverable and know what good looks like.