Copilot/add data driven unit tests

.best-practices/cloud-architecture/ReadMe.md

@@ -0,0 +1,42 @@
+# Cloud Architecture Best Practices
+
+## 1. Purpose
+Deliver scalable, resilient, and cost-effective solutions in cloud environments.
+
+## 2. Core Principles
+- Design for failure
+- Automate everything
+- Use managed services where possible
+- Optimize for cost and performance
+
+## 3. Industry Standards & Frameworks
+- AWS Well-Architected Framework
+- Azure Cloud Adoption Framework
+- Google Cloud Architecture Framework
+
+## 4. Common Patterns
+- Multi-region deployments
+- Hybrid cloud
+- Event-driven serverless
+
+## 5. Anti-Patterns to Avoid
+- Lift-and-shift without modernization
+- Overprovisioning resources
+- Ignoring shared responsibility model
+
+## 6. Tooling & Ecosystem
+- Terraform, Bicep, Pulumi
+- Kubernetes, Service Mesh
+- Cloud-native monitoring tools
+
+## 7. Emerging Trends
+- FinOps
+- Sustainability-aware workloads
+- Cloud-native AI services
+
+## 8. Architecture Decision Guidance
+- Choose multi-cloud only if business/regulatory needs demand it.
+- Balance managed services vs. portability.
+
+## 9. References
+- [Azure CAF](https://learn.microsoft.com/azure/cloud-adoption-framework/)

.best-practices/data-analytics/ReadMe.md

@@ -0,0 +1,42 @@
+# Data & Analytics Best Practices
+
+## 1. Purpose
+Enable data-driven decision-making and advanced analytics.
+
+## 2. Core Principles
+- Treat data as a product
+- Ensure data quality and lineage
+- Secure data at rest and in motion
+- Enable self-service analytics
+
+## 3. Industry Standards & Frameworks
+- Data Mesh
+- DAMA-DMBOK
+- FAIR data principles
+
+## 4. Common Patterns
+- Data lakehouse
+- Event streaming pipelines
+- ELT with dbt
+
+## 5. Anti-Patterns to Avoid
+- Data silos
+- ETL sprawl
+- Ignoring governance
+
+## 6. Tooling & Ecosystem
+- Kafka, Pulsar
+- Snowflake, BigQuery, Synapse
+- dbt, Airflow
+
+## 7. Emerging Trends
+- Real-time analytics
+- AI/ML integration
+- Data contracts
+
+## 8. Architecture Decision Guidance
+- Use data mesh when scaling across domains.
+- Balance central governance with federated ownership.
+
+## 9. References
+- [Data Mesh Principles](https://martinfowler.com/articles/data-mesh-principles.html)

.best-practices/devops/ReadMe.md

@@ -0,0 +1,42 @@
+# DevOps & Platform Engineering Best Practices
+
+## 1. Purpose
+Enable rapid, reliable, and repeatable delivery of software.
+
+## 2. Core Principles
+- Everything as code
+- Continuous feedback loops
+- Shift-left testing and security
+- Immutable infrastructure
+
+## 3. Industry Standards & Frameworks
+- CALMS model
+- GitOps
+- SRE principles
+
+## 4. Common Patterns
+- CI/CD pipelines
+- Blue/green and canary deployments
+- Infrastructure as Code
+
+## 5. Anti-Patterns to Avoid
+- Manual deployments
+- Snowflake servers
+- Over-reliance on scripts without version control
+
+## 6. Tooling & Ecosystem
+- GitHub Actions, Azure DevOps, Jenkins
+- ArgoCD, Flux
+- Prometheus, Grafana
+
+## 7. Emerging Trends
+- Platform engineering teams
+- Internal developer platforms (IDPs)
+- Policy-as-code
+
+## 8. Architecture Decision Guidance
+- Standardize pipelines across teams.
+- Invest in developer experience (DX).
+
+## 9. References
+- [Google SRE Book](https://sre.google/books/)

.best-practices/integration/ReadMe.md

@@ -0,0 +1,42 @@
+# Integration & APIs Best Practices
+
+## 1. Purpose
+Enable interoperability and composability across systems.
+
+## 2. Core Principles
+- API-first design
+- Loose coupling
+- Backward compatibility
+- Contract-first development
+
+## 3. Industry Standards & Frameworks
+- OpenAPI/Swagger
+- AsyncAPI
+- GraphQL spec
+
+## 4. Common Patterns
+- API Gateway
+- Event-driven integration
+- CQRS
+
+## 5. Anti-Patterns to Avoid
+- Point-to-point spaghetti integrations
+- Breaking API changes without versioning
+- Overloading APIs with business logic
+
+## 6. Tooling & Ecosystem
+- Kong, Apigee, Azure API Management
+- Kafka, RabbitMQ
+- GraphQL servers
+
+## 7. Emerging Trends
+- API monetization
+- Event mesh
+- gRPC adoption
+
+## 8. Architecture Decision Guidance
+- Use REST for broad compatibility, gRPC for high-performance internal services.
+- Favor async messaging for decoupling.
+
+## 9. References
+- [AsyncAPI Initiative](https://www.asyncapi.com/)

.best-practices/observability/ReadMe.md

@@ -0,0 +1,42 @@
+# Observability Best Practices
+
+## 1. Purpose
+Provide visibility into system health, performance, and reliability.
+
+## 2. Core Principles
+- Instrument everything
+- Correlate logs, metrics, and traces
+- Automate alerting and remediation
+- Design for failure detection
+
+## 3. Industry Standards & Frameworks
+- OpenTelemetry
+- SRE golden signals
+- ITIL incident management
+
+## 4. Common Patterns
+- Centralized logging
+- Distributed tracing
+- Metrics dashboards
+
+## 5. Anti-Patterns to Avoid
+- Alert fatigue
+- Logging without structure
+- Monitoring only infrastructure, not business KPIs
+
+## 6. Tooling & Ecosystem
+- Prometheus, Grafana
+- ELK/EFK stack
+- Jaeger, Zipkin
+
+## 7. Emerging Trends
+- AIOps
+- Continuous profiling
+- Observability-as-code
+
+## 8. Architecture Decision Guidance
+- Define SLIs, SLOs, SLAs early.
+- Balance observability depth with cost.
+
+## 9. References
+- [OpenTelemetry](https://opentelemetry.io/)

.best-practices/radar.md

@@ -0,0 +1,121 @@
+# Solution Architect Radar (2025 Q4)
+
+This radar provides a maturity view of industry best practices across specialties.  
+Use it to guide adoption, trials, and assessments, while avoiding outdated practices.
+
+---
+
+## Quadrant View
+
+### ADOPT
+- **Software Architecture**: VBD, DDD, Clean/Hexagonal Architecture, ADRs
+- **Security**: Zero Trust, OWASP Top 10, centralized secrets management
+- **Cloud**: Managed services, IaC (Terraform/Bicep)
+- **DevOps**: GitOps, CI/CD pipelines, immutable infrastructure
+- **Data**: Lakehouse, ELT with dbt, event streaming
+- **Integration**: API-first, OpenAPI/AsyncAPI, backward-compatible versioning
+- **Observability**: OpenTelemetry, SRE golden signals
+
+### TRIAL
+- **Software Architecture**: Event Sourcing, CQRS
+- **Security**: Confidential computing, automated threat modeling
+- **Cloud**: Serverless-first, multi-cloud portability frameworks
+- **DevOps**: Internal Developer Platforms (IDPs), policy-as-code
+- **Data**: Data mesh, real-time analytics
+- **Integration**: GraphQL, gRPC
+- **Observability**: Observability-as-code, continuous profiling
+
+### ASSESS
+- **Software Architecture**: AI-assisted validation, WASM backends
+- **Security**: Post-quantum cryptography, AI-driven anomaly detection
+- **Cloud**: Sustainability-aware workload placement
+- **DevOps**: AI-driven pipeline optimization
+- **Data**: Data contracts, AI-native governance
+- **Integration**: Event mesh, API monetization
+- **Observability**: AIOps-driven remediation, business KPI observability
+
+### HOLD
+- **Software Architecture**: Big Ball of Mud, God classes
+- **Security**: Hardcoded secrets, perimeter-only defenses
+- **Cloud**: Lift-and-shift without modernization
+- **DevOps**: Manual deployments, snowflake servers
+- **Data**: ETL sprawl, unmanaged silos
+- **Integration**: Point-to-point spaghetti integrations
+- **Observability**: Infra-only monitoring, unstructured logs
+
+---
+
+## Visual Radar (Mermaid)
+
+```mermaid
+flowchart LR
+    subgraph Q1 [ADOPT]
+      QA1[Software Architecture: DDD, Clean/Hexagonal, ADRs]
+      QA2[Security: Zero Trust, OWASP Top 10, Secrets mgmt]
+      QA3[Cloud: Managed services, IaC]
+      QA4[DevOps: GitOps, CI/CD, Immutable infra]
+      QA5[Data: Lakehouse, ELT with dbt, Event streaming]
+      QA6[Integration: API-first, OpenAPI/AsyncAPI, Versioning]
+      QA7[Observability: OpenTelemetry, SRE golden signals]
+    end
+
+    subgraph Q2 [TRIAL]
+      QT1[Software Architecture: Event Sourcing, CQRS]
+      QT2[Security: Confidential computing, Threat modeling automation]
+      QT3[Cloud: Serverless-first, Multi-cloud portability]
+      QT4[DevOps: IDPs, Policy-as-code]
+      QT5[Data: Data mesh, Real-time analytics]
+      QT6[Integration: GraphQL, gRPC]
+      QT7[Observability: Observability-as-code, Continuous profiling]
+    end
+
+    subgraph Q3 [ASSESS]
+      QS1[Software Architecture: AI-assisted validation, WASM backends]
+      QS2[Security: Post-quantum crypto, AI anomaly detection]
+      QS3[Cloud: Sustainability-aware placement]
+      QS4[DevOps: AI-driven pipeline optimization]
+      QS5[Data: Data contracts, AI-native governance]
+      QS6[Integration: Event mesh, API monetization]
+      QS7[Observability: AIOps remediation, Business KPI obs]
+    end
+
+    subgraph Q4 [HOLD]
+      QH1[Software Architecture: Big Ball of Mud, God classes]
+      QH2[Security: Hardcoded secrets, Perimeter-only]
+      QH3[Cloud: Lift-and-shift w/o modernization]
+      QH4[DevOps: Manual deployments, Snowflake servers]
+      QH5[Data: ETL sprawl, Unmanaged silos]
+      QH6[Integration: Point-to-point spaghetti, Breaking changes]
+      QH7[Observability: Infra-only metrics, Unstructured logs]
+    end
+
+    class Q1 adopt;
+    classDef adopt fill='#b7f5c7',stroke='#2f7',stroke-width='1px',color='#000';
+
+    class Q2 trial;
+    classDef trial fill='#cbe8ff',stroke='#39f',stroke-width='1px',color='#000';
+
+    class Q3 assess;
+    classDef assess fill='#fff1a8',stroke='#fc3',stroke-width='1px',color='#000';
+
+    class Q4 hold;
+    classDef hold fill='#ffc2c2',stroke='#f55',stroke-width='1px',color='#000';
+
+```
+---
+## Related Governance Docs
+- [Branching Strategy Playbook](branching-strategy.md)
+- [Quarterly Radar Review Checklist](quarterly-radar-review.md)
+- [ADR Index](../architecture-decision-records/index.md)
+
+
+## Capsules
+Each specialty has a dedicated capsule with detailed best practices:
+
+- [Software Architecture](./software-architecture/README.md)  
+- [Security](./security/README.md)  
+- [Cloud Architecture](./cloud-architecture/README.md)  
+- [DevOps & Platform Engineering](./devops/README.md)  
+- [Data & Analytics](./data-analytics/README.md)  
+- [Integration & APIs](./integration/README.md)  
+- [Observability](./observability/README.md)  

.best-practices/security/ReadMe.md

@@ -0,0 +1,42 @@
+# Security Best Practices
+
+## 1. Purpose
+Protect confidentiality, integrity, and availability of systems.
+
+## 2. Core Principles
+- Zero Trust by default
+- Defense in depth
+- Least privilege access
+- Encrypt everywhere
+
+## 3. Industry Standards & Frameworks
+- OWASP Top 10
+- NIST Cybersecurity Framework
+- ISO 27001
+
+## 4. Common Patterns
+- Centralized secrets management
+- API Gateway with JWT validation
+- Network segmentation
+
+## 5. Anti-Patterns to Avoid
+- Hardcoded secrets
+- Flat networks
+- Security as an afterthought
+
+## 6. Tooling & Ecosystem
+- Azure Key Vault, AWS KMS
+- SAST/DAST tools
+- SIEM platforms
+
+## 7. Emerging Trends
+- Confidential computing
+- Post-quantum cryptography
+- AI-driven threat detection
+
+## 8. Architecture Decision Guidance
+- Engage security architects for regulated workloads.
+- Automate security checks in CI/CD.
+
+## 9. References
+- [OWASP Foundation](https://owasp.org)