Practice catalog

Define the problem

• Requirements Elicitation
• Use Cases
• Impact Mapping
• EventStorming

Clarify behavior

• Behavior-Driven Development
• Acceptance Test-Driven Development
• Specification by Example
• Example Mapping

Choose the scope

• MoSCoW Prioritization
• User Story Mapping
• Story Splitting

Model and boundaries

• Domain-Driven Design
• API-first design
• Hexagonal Architecture / Ports and Adapters
• Functional Core, Imperative Shell
• Model-Driven Development

Qualities and decisions

• Quality Attribute Workshop (QAW)
• Architecture Tradeoff Analysis Method (ATAM)
• Design Review / Request for Comments
• Design by Contract
• Architecture Decision Records
• Architecture Fitness Functions

Evolving the solution

• Test-Driven Development
• Refactoring
• You Aren’t Gonna Need It
• Technical spike
• Prototyping
• Walking Skeleton

Finding causes of defects

• Systematic Debugging
• Minimal Reproducible Example
• Delta Debugging
• Regression Bisection / git bisect

Levels and scope

• Unit Testing
• Integration Testing
• End-to-end Testing

Code and model analysis

• Static Analysis
• Static Type Checking
• Model Checking

Scenarios and data

• Equivalence Partitioning
• Boundary Value Analysis
• Decision Table Testing
• Pairwise / Combinatorial Testing
• Property-based Testing
• Model-based Testing
• Metamorphic Testing
• Fuzz Testing
• Differential Testing

Objectives and strategy

• Consumer-driven Contract Testing
• Performance and Load Testing
• Usability Testing
• Accessibility Testing
• Exploratory Testing
• Risk-based Testing
• Mutation Testing

Code and dependencies

• Continuous Integration
• Trunk-based Development
• Software Configuration Management
• Dependency Management

Build

• Reproducible Builds
• Hermetic Builds

Release preparation

• Continuous Delivery
• Continuous Deployment
• Deployment Automation
• Database Change Management / Migrations

Release control

• Feature Flags / Feature Toggles
• Canary Release
• Blue–Green Deployment
• Rollback and Rollback Safety

Observation and objectives

• Observability
• Service Level Objectives
• Error Budgets
• Actionable Alerting
• Capacity Planning

Incidents and recovery

• Incident Response / Incident Management
• Runbooks / Operational Playbooks
• Backup and Restore Drills
• Blameless Postmortems
• Chaos Engineering

Environment

• Infrastructure as Code

• Extreme Programming
• Scrum
• Kanban Method
• Lean Software Development
• Feature-Driven Development
• DevOps
• Site Reliability Engineering

• Iterative Development
• Incremental Development
• Spiral Development Model
• V-model
• Waterfall Model

• Pair Programming
• Ensemble / Mob Programming
• Code Review
• Collective Code Ownership
• Work in Progress Limits
• Working in Small Batches
• Retrospectives

• Characterization Testing
• Golden Master / Approval Testing
• Preparatory Refactoring
• Strangler Fig
• Branch by Abstraction
• Parallel Change / Expand–Contract
• Change Impact Analysis

• Threat Modeling
• Security Architecture Review
• Secure Coding Practices
• Static Application Security Testing
• Dynamic Application Security Testing
• Software Composition Analysis
• Secret Scanning

• Requirements Traceability
• Documentation as Code
• Living Documentation
• Definition of Done
• Software Risk Management
• Backward Compatibility
• Semantic Versioning