A cycle for productizing reusable integration capabilities before selecting the implementation style.
Guide reusable integration capability design before choosing an API, event, file, stream, data product, direct integration, or hybrid implementation style.
Method map
Metro map
Select a cycle, station, or stakeholder to open its permanent method page.
Selected station: Strategy
People to involve
Resources and canvases
Journey criteria
Entry criteria
Business goals are defined.
Capability opportunity is identified and documented.
Exit criteria
The chosen architecture, platform, and implementation style have been validated with the relevant architecture, security, and platform stakeholders.
The interface and its capabilities are documented clearly enough for review, audit, and onboarding.
The solution passes quality, security, compliance, and readiness checks.
Frame the reusable integration capability, business need, ownership, and expected reuse before selecting the implementation style.
Integration and API work often jumps too quickly to a technical pattern. This station keeps the team focused on the business journey, domain meaning, value, reuse potential, ownership, and viability before selecting APIs, events, files, streams, data products, or direct integration.
Capture integration consumers, provider responsibilities, onboarding needs, service expectations, and operational constraints.
The right architecture depends on consumer goals, onboarding expectations, service levels, data quality needs, change tolerance, observability, support, and producer constraints.
Select the integration architecture, implementation style, and platform capabilities, taking account of constraints and the governance model.
Architecture choices should follow from evidence about business impact, locations, trust boundaries, capacity, latency, data ownership, consistency, operability, security, privacy, governance, and cost.
Design the interface contract, schemas, payloads, and interaction patterns for the selected integration style.
Once the architecture pattern is known, the design must turn capability requirements into clear interface contracts, interactions, schemas, data rules, lifecycle expectations, and consumer obligations.
Build, test, automate, deploy, and operate the integration capability using its selected implementation style and validated interface contract.
A reusable capability needs reliable delivery and operations regardless of whether it becomes an API, event stream, file exchange, data product, or direct integration.
Assure integration readiness, governance, quality, security, compliance, and operational evidence before release.
Reusable capabilities create operational, data, security, privacy, compliance, and consumer-impact risks. Readiness checks reduce surprises before release or production use.
Publish the integration capability so teams can discover it, evaluate it, request access, complete onboarding, reuse it, and get support.
Reusable capabilities only create value when consumers can find them, understand their interface contract and service expectations, request access, and know who owns support and lifecycle decisions.
Capabilities need continuous feedback to stay reliable, valuable, cost-effective, and reusable as consumers, systems, data, and platforms change.
Publish this cycle
Export the page-specific template after reviewing the entity summary and supporting details above.
Publishing
Markdown and Confluence export
Use Markdown for repositories and static sites, or Confluence-wiki markup for compatible Confluence pages.
Markdown
# Integration Productization Cycle question template
A cycle for productizing reusable integration capabilities before selecting the implementation style.
Use this template to gather answers and evidence station by station. Canvas section prompts are listed first, followed by other related resources.
## 1. Integration Capability Strategy
Frame the reusable integration capability, business need, ownership, and expected reuse before selecting the implementation style.
### Canvas questions
#### Customer Journey Canvas
What customer, partner, or consumer journey is the capability intended to support?
- **Persona**: Who is the typical customer experiencing this journey?
- **Customer Discovers Need**: How does the customer recognize their need or problem?
- **Customer Need Is Resolved**: How is the customer's need ultimately resolved?
- **Journey Steps**: What are the steps the customer takes in their journey?
- **Pains**: What are the customer's pain points or challenges?
- **Gains**: What are the customer's gains or benefits?
- **Inputs & Outputs**: What are the inputs and outputs at each step?
- **Interaction & Processing Rules**: What are the interaction and processing rules at each step?
#### Domain Canvas
What are the core entities and business rules related to this capability or domain?
- **Selected Customer Journey Steps**: Which customer journey steps are relevant to this domain?
- **Core Entities & Business Meaning**: What are the core entities and their business meaning?
- **Attributes & Business Importance**: What are the key attributes of each entity and their business importance?
- **Relationships Between Entities**: What are the relationships between the entities?
- **Business, Compliance & Integrity Rules**: What are the business, compliance, and integrity rules related to the entities?
- **Security & Privacy Considerations**: What are the security and privacy considerations related to the entities?
#### Capability Value Proposition Canvas
Which reusable capability would create value for consumers without deciding yet whether it should be delivered as an API, event, file, stream, data product, or another implementation style?
- **Consumer tasks and outcomes**: What are consumers, partners, users, systems, or teams trying to achieve?
- **Gain-enabling capability features**: What capability features would help consumers achieve better outcomes, speed, automation, insight, reach, or compliance?
- **Pain-relieving capability features**: What capability features would remove friction, manual work, errors, delays, risk, or uncertainty for consumers?
- **Reusable capabilities**: What reusable business or data capabilities could serve these tasks, gains, and pains across more than one consumer or use case?
#### Capability Business Model Canvas
How viable, reusable, funded, owned, supported, and discoverable should this integration capability be?
- **Capability value proposition**: What value does this reusable capability provide to consumers and to the organization or ecosystem?
- **Capability consumer segments**: Who are the current and potential consumers of the capability, including teams, partners, systems, products, or data users?
- **Consumer engagement**: How will consumers discover, evaluate, request, onboard, get support for, and provide feedback on the capability?
- **Channels**: Through which catalogs, portals, marketplaces, documentation sites, support paths, or governance processes will consumers interact with the capability?
- **Key resources**: Which systems, data assets, platforms, people, standards, funding, and operational capabilities are required?
- **Key activities**: What must the capability owner and producers do to design, deliver, govern, support, and improve the capability?
- **Key partners**: Which business, technology, data, security, legal, platform, or external partners are needed to make the capability work?
- **Benefits**: What business, operational, ecosystem, reuse, compliance, or cost benefits justify the capability?
- **Costs**: What are the significant costs of building, operating, governing, supporting, and evolving the capability?
## 2. Integration Consumer Requirements & Onboarding
Capture integration consumers, provider responsibilities, onboarding needs, service expectations, and operational constraints.
### Canvas questions
#### Consumer Experience Requirements Canvas
What experience and non-functional requirements do consumers need before deciding the best integration architecture?
- **Consumer goals**: What are the consumer's business goals, workflow goals, decision goals, automation goals, or data usage goals?
- **Availability and timeliness**: When must the capability be available, how fresh must information be, and what latency or delivery windows matter?
- **Volume and performance**: What request, event, record, file, batch, user, or transaction volumes must the capability support now and later?
- **Data quality and consistency**: What accuracy, completeness, consistency, ordering, deduplication, reconciliation, or validation expectations do consumers have?
- **Security, privacy, and compliance**: What identity, authorization, confidentiality, residency, consent, retention, audit, or regulatory constraints apply?
- **Onboarding and access**: How should consumers find, request, test, get approved for, and start using the capability?
- **Change and versioning**: How much change tolerance do consumers have, and what notice, compatibility, migration, or versioning expectations apply?
- **Observability and support**: What monitoring, status, traceability, data quality visibility, support, ownership, and incident communication do consumers need?
- **Recovery and continuity**: What replay, retry, reconciliation, backup, fallback, continuity, or manual recovery expectations must be supported?
- **Architecture implications**: What do these requirements imply for possible architecture styles, such as APIs, events, files, streams, data products, or direct integration?
### Other related resources
- **API Onboarding Best Practices**: Best practices to streamline API consumer onboarding journeys with step-by-step registration, discovery, and first-call guidance.
## 3. Integration Architecture & Platform Decisions
Select the integration architecture, implementation style, and platform capabilities, taking account of constraints and the governance model.
### Canvas questions
#### Business Impact Canvas
What are the potential business impacts if the capability, integration, or service fails?
- **Availability Risks**: What are the potential risks to capability availability?
- **Mitigate Availability Risks**: How can the capability owner mitigate the availability risks?
- **Security Risks**: What are the potential security risks associated with the capability?
- **Mitigate Security Risks**: How can the capability owner mitigate the security risks?
- **Data Risks**: What are the potential risks to data integrity or confidentiality?
- **Mitigate Data Risks**: How can the capability owner mitigate the data risks?
#### Location Canvas
What geopolitical, regulatory, network, and trust boundaries affect this capability or integration?
- **Location / Trust Groups**: What are the relevant geopolitical, regulatory, network, or trust groups?
- **Group Characteristics**: What are the characteristics of those groups, such as residency, trust level, or network exposure?
- **Relevant Locations / Zones**: What are the relevant locations, zones, or environments within each group?
- **Location / Zone Characteristics**: What are the characteristics of those locations or zones, such as ownership, region, or exposure?
- **Network / Regulatory Distances**: What latency, trust, regulatory, or connectivity distances exist between the locations?
- **Distance Characteristics**: What are the characteristics of those distances, such as latency sensitivity, residency constraints, or trust boundaries?
- **Connectivity Endpoints**: What connectivity endpoints or interfaces are associated with the locations?
- **Endpoint Access Characteristics**: What are the characteristics of those endpoints, such as exposure, protocol, security, or access restrictions?
#### Capacity Canvas
How much capacity is needed to support expected capability consumption?
- **Current Business Volumes**: What are the current business volumes and transaction rates?
- **Future Consumption Trends**: What are the anticipated future consumption trends?
- **Peak Load and Availability Requirements**: What are the peak load and availability requirements?
- **Caching Strategies**: What caching strategies can be used to optimize performance?
- **Rate Limiting Strategies**: What rate limiting strategies can be used to manage consumption?
- **Scaling Strategies**: What scaling strategies can be used to accommodate growth?
### Other related resources
- **Partner Integration Guidelines**: Integration checklists and communication patterns to manage technical and legal aspects of third-party API relationships.
## 4. Integration Solution Design
Design the interface contract, schemas, payloads, and interaction patterns for the selected integration style.
### Canvas questions
#### Domain Canvas
What are the core entities and business rules related to this capability or domain?
- **Selected Customer Journey Steps**: Which customer journey steps are relevant to this domain?
- **Core Entities & Business Meaning**: What are the core entities and their business meaning?
- **Attributes & Business Importance**: What are the key attributes of each entity and their business importance?
- **Relationships Between Entities**: What are the relationships between the entities?
- **Business, Compliance & Integrity Rules**: What are the business, compliance, and integrity rules related to the entities?
- **Security & Privacy Considerations**: What are the security and privacy considerations related to the entities?
#### Interaction Canvas
What kinds of interactions should this capability support before choosing a protocol-specific design?
- **CRUD Interactions**: Are CRUD (Create, Read, Update, Delete) interactions needed here?
- **CRUD Input & Output Models**: What are the input and output models for the CRUD interactions, if this style is needed?
- **CRUD Processing & Validation**: What are the processing and validation rules for the CRUD interactions, if this style is needed?
- **Query-Driven Interactions**: What read or query interactions are needed to answer consumer questions?
- **Query-Driven Input & Output Models**: What are the input and output models for the query-driven interactions?
- **Query-Driven Processing & Validation**: What are the processing and validation rules for the query-driven interactions?
- **Command-Driven Interactions**: What state-changing commands are needed, if any?
- **Command-Driven Input & Output Models**: What are the input and output models for the command-driven interactions, if this style is needed?
- **Command-Driven Processing & Validation**: What are the processing and validation rules for the command-driven interactions, if this style is needed?
- **Event-Driven Interactions**: What events need to be published or consumed, if any?
- **Event-Driven Input & Output Models**: What are the input and output models for the event-driven interactions, if this style is needed?
- **Event-Driven Processing & Validation**: What are the processing and validation rules for the event-driven interactions, if this style is needed?
#### REST Canvas
How can the API be designed using RESTful principles?
- **API Resources**: What are the key resources exposed by the API?
- **API Resource Model**: What is the structure of the API resource model?
- **API Verbs**: What HTTP verbs are used to interact with the API resources?
- **API Verb Example**: Provide an example of an API request and response for each verb.
#### Event Canvas
What events are relevant to the API, and how are they processed?
- **User Task / Trigger**: What user action or system event triggers this event operation?
- **Input / Event Payload**: What data is included in the incoming event payload? Specify key attributes.
- **Processing / Logic**: Describe the backend processing logic, including validations, transformations, or routing decisions.
- **Output / Event Result**: What resulting event or acknowledgment is produced? Include attributes of the output payload.
#### GraphQL Canvas
How can the API be designed using GraphQL principles?
- **API Name**: What is the name of the GraphQL API or endpoint?
- **Consumer Goals**: What problems are API consumers trying to solve? What data do they need?
- **Key Types**: What are the core types exposed (e.g., User, Order, Product)?
- **Relationships**: How do types relate to each other in nested queries?
- **Queries**: What common queries should be supported?
- **Mutations**: What operations will modify data (e.g., create, update, delete)?
- **Subscriptions**: Are there any real-time updates or events consumers can subscribe to?
- **Authorization Rules**: Who can access which fields or types?
- **Consumer Constraints**: Are there pagination, filtering, or rate-limiting constraints?
- **Notes / Open Questions**: Any pending decisions or integration considerations?
### Other related resources
- **Integration Style Selection Guide**: Guidance for choosing between API, event, file, stream, data product, direct integration, or hybrid implementation styles based on requirements and constraints.
- **Contract First Design**: A guideline advocating for API-first approaches using formal contracts (e.g., OpenAPI) to align stakeholders before development.
## 5. Integration Delivery & Operations
Build, test, automate, deploy, and operate the integration capability using its selected implementation style and validated interface contract.
### Station questions
- Use development best practices to implement the validated interface contract with established frameworks, libraries, and team standards.
- Build the implementation from the validated interface contract using established frameworks, libraries, and team standards.
- Use testing guidance to verify functionality, data quality, compatibility, security, performance, resilience, and recovery expectations.
- Use CI/CD guidance to automate build, test, deployment, configuration, and traceability.
- Use security guidance to protect data, access, credentials, and platform boundaries.
- Use the audit checklist to ensure the solution meets functional and non-functional requirements, including security, performance, and compliance.
- Apply delivery, testing, CI/CD, operations, and security guidance to the chosen implementation style.
- A reusable capability needs reliable delivery and operations regardless of whether it becomes an API, event stream, file exchange, data product, or direct integration.
### Other related resources
- **API Development Best Practices**: Implementation guidance for turning a validated API interface contract into a consistent, maintainable API codebase using standard libraries, reusable patterns, and aligned development workflows.
- **API Testing Best Practices**: Guidelines for implementing automated functional, performance, and security testing throughout the API lifecycle.
- **APIOps CI/CD For APIs**: Deployment guidance that integrates API lifecycle tasks—design, testing, governance—into continuous integration and delivery pipelines.
- **API Security Best Practices**: A set of actionable controls for securing APIs, including authentication, authorization, encryption, rate-limiting, and pipeline-level compliance checks.
- **Partner Integration Guidelines**: Integration checklists and communication patterns to manage technical and legal aspects of third-party API relationships.
## 6. Integration Readiness Assurance
Assure integration readiness, governance, quality, security, compliance, and operational evidence before release.
### Station questions
- Use the audit checklist as a reusable quality checklist for interface contract, documentation, security, performance, and compliance readiness.
- Use checklists, linters, and testing tools to verify consistency and conformance with standards.
- Collaborate with governance teams and domain experts to ensure the capability is ready for production.
- Use audit and compliance resources to verify that the capability is ready for controlled release and reuse.
- Reusable capabilities create operational, data, security, privacy, compliance, and consumer-impact risks. Readiness checks reduce surprises before release or production use.
### Other related resources
- **API Audit Checklist**: A lifecycle-based checklist to verify API readiness across design, delivery, publishing, and compliance using defined audit criteria and evidence.
- **API Compliance Best Practices**: Ensure APIs meet legal, regulatory, and internal compliance through documentation, controls, and automated validations.
## 7. Integration Publishing & Enablement
Publish the integration capability so teams can discover it, evaluate it, request access, complete onboarding, reuse it, and get support.
### Station questions
- Publish capability information to the appropriate catalogs, portals, gateways, or environments to support reuse by multiple consumers.
- Document how consumers find and use the capability, including onboarding processes and registration.
- Ensure security models, access configuration, and legal terms are clear and accessible to consumers.
- Publish ownership, documentation, onboarding, support contacts, service expectations, lifecycle status, and access request paths.
- Reusable capabilities only create value when consumers can find them, understand their interface contract and service expectations, request access, and know who owns support and lifecycle decisions.
### Other related resources
- **API Onboarding Best Practices**: Best practices to streamline API consumer onboarding journeys with step-by-step registration, discovery, and first-call guidance.
- **Service Agreement Template**: A customizable agreement format that defines expectations, SLAs, responsibilities, and access terms for API consumption.
## 8. Integration Monitoring & Improvement
Monitor integration reliability, reuse, incidents, performance, consumer outcomes, and improvement needs.
### Station questions
- Use metrics and analytics guidance to define capability usage, reliability, data quality, cost, adoption, and consumer-value measures.
- Analyze usage metrics and incorporate consumer feedback into capability iterations.
- Establish a habit of reviewing metrics and planning continuous improvement activities.
- Use metrics, analytics, and engagement practices to improve the capability over time.
- Capabilities need continuous feedback to stay reliable, valuable, cost-effective, and reusable as consumers, systems, data, and platforms change.
### Other related resources
- **API Metrics And Analytics**: A resource for defining, collecting, and analyzing API performance and usage data to align technical KPIs with business outcomes.
- **API Community Engagement Strategies**: A playbook for fostering API adoption by cultivating communities through content, support channels, feedback loops, and social engagement strategies.
Confluence-wiki
h1. Integration Productization Cycle question template
A cycle for productizing reusable integration capabilities before selecting the implementation style.
Use this template to gather answers and evidence station by station. Canvas section prompts are listed first, followed by other related resources.
h2. 1. Integration Capability Strategy
Frame the reusable integration capability, business need, ownership, and expected reuse before selecting the implementation style.
h3. Canvas questions
#### Customer Journey Canvas
What customer, partner, or consumer journey is the capability intended to support?
* *Persona*: Who is the typical customer experiencing this journey?
* *Customer Discovers Need*: How does the customer recognize their need or problem?
* *Customer Need Is Resolved*: How is the customer's need ultimately resolved?
* *Journey Steps*: What are the steps the customer takes in their journey?
* *Pains*: What are the customer's pain points or challenges?
* *Gains*: What are the customer's gains or benefits?
* *Inputs & Outputs*: What are the inputs and outputs at each step?
* *Interaction & Processing Rules*: What are the interaction and processing rules at each step?
#### Domain Canvas
What are the core entities and business rules related to this capability or domain?
* *Selected Customer Journey Steps*: Which customer journey steps are relevant to this domain?
* *Core Entities & Business Meaning*: What are the core entities and their business meaning?
* *Attributes & Business Importance*: What are the key attributes of each entity and their business importance?
* *Relationships Between Entities*: What are the relationships between the entities?
* *Business, Compliance & Integrity Rules*: What are the business, compliance, and integrity rules related to the entities?
* *Security & Privacy Considerations*: What are the security and privacy considerations related to the entities?
#### Capability Value Proposition Canvas
Which reusable capability would create value for consumers without deciding yet whether it should be delivered as an API, event, file, stream, data product, or another implementation style?
* *Consumer tasks and outcomes*: What are consumers, partners, users, systems, or teams trying to achieve?
* *Gain-enabling capability features*: What capability features would help consumers achieve better outcomes, speed, automation, insight, reach, or compliance?
* *Pain-relieving capability features*: What capability features would remove friction, manual work, errors, delays, risk, or uncertainty for consumers?
* *Reusable capabilities*: What reusable business or data capabilities could serve these tasks, gains, and pains across more than one consumer or use case?
#### Capability Business Model Canvas
How viable, reusable, funded, owned, supported, and discoverable should this integration capability be?
* *Capability value proposition*: What value does this reusable capability provide to consumers and to the organization or ecosystem?
* *Capability consumer segments*: Who are the current and potential consumers of the capability, including teams, partners, systems, products, or data users?
* *Consumer engagement*: How will consumers discover, evaluate, request, onboard, get support for, and provide feedback on the capability?
* *Channels*: Through which catalogs, portals, marketplaces, documentation sites, support paths, or governance processes will consumers interact with the capability?
* *Key resources*: Which systems, data assets, platforms, people, standards, funding, and operational capabilities are required?
* *Key activities*: What must the capability owner and producers do to design, deliver, govern, support, and improve the capability?
* *Key partners*: Which business, technology, data, security, legal, platform, or external partners are needed to make the capability work?
* *Benefits*: What business, operational, ecosystem, reuse, compliance, or cost benefits justify the capability?
* *Costs*: What are the significant costs of building, operating, governing, supporting, and evolving the capability?
h2. 2. Integration Consumer Requirements & Onboarding
Capture integration consumers, provider responsibilities, onboarding needs, service expectations, and operational constraints.
h3. Canvas questions
#### Consumer Experience Requirements Canvas
What experience and non-functional requirements do consumers need before deciding the best integration architecture?
* *Consumer goals*: What are the consumer's business goals, workflow goals, decision goals, automation goals, or data usage goals?
* *Availability and timeliness*: When must the capability be available, how fresh must information be, and what latency or delivery windows matter?
* *Volume and performance*: What request, event, record, file, batch, user, or transaction volumes must the capability support now and later?
* *Data quality and consistency*: What accuracy, completeness, consistency, ordering, deduplication, reconciliation, or validation expectations do consumers have?
* *Security, privacy, and compliance*: What identity, authorization, confidentiality, residency, consent, retention, audit, or regulatory constraints apply?
* *Onboarding and access*: How should consumers find, request, test, get approved for, and start using the capability?
* *Change and versioning*: How much change tolerance do consumers have, and what notice, compatibility, migration, or versioning expectations apply?
* *Observability and support*: What monitoring, status, traceability, data quality visibility, support, ownership, and incident communication do consumers need?
* *Recovery and continuity*: What replay, retry, reconciliation, backup, fallback, continuity, or manual recovery expectations must be supported?
* *Architecture implications*: What do these requirements imply for possible architecture styles, such as APIs, events, files, streams, data products, or direct integration?
h3. Other related resources
* *API Onboarding Best Practices*: Best practices to streamline API consumer onboarding journeys with step-by-step registration, discovery, and first-call guidance.
h2. 3. Integration Architecture & Platform Decisions
Select the integration architecture, implementation style, and platform capabilities, taking account of constraints and the governance model.
h3. Canvas questions
#### Business Impact Canvas
What are the potential business impacts if the capability, integration, or service fails?
* *Availability Risks*: What are the potential risks to capability availability?
* *Mitigate Availability Risks*: How can the capability owner mitigate the availability risks?
* *Security Risks*: What are the potential security risks associated with the capability?
* *Mitigate Security Risks*: How can the capability owner mitigate the security risks?
* *Data Risks*: What are the potential risks to data integrity or confidentiality?
* *Mitigate Data Risks*: How can the capability owner mitigate the data risks?
#### Location Canvas
What geopolitical, regulatory, network, and trust boundaries affect this capability or integration?
* *Location / Trust Groups*: What are the relevant geopolitical, regulatory, network, or trust groups?
* *Group Characteristics*: What are the characteristics of those groups, such as residency, trust level, or network exposure?
* *Relevant Locations / Zones*: What are the relevant locations, zones, or environments within each group?
* *Location / Zone Characteristics*: What are the characteristics of those locations or zones, such as ownership, region, or exposure?
* *Network / Regulatory Distances*: What latency, trust, regulatory, or connectivity distances exist between the locations?
* *Distance Characteristics*: What are the characteristics of those distances, such as latency sensitivity, residency constraints, or trust boundaries?
* *Connectivity Endpoints*: What connectivity endpoints or interfaces are associated with the locations?
* *Endpoint Access Characteristics*: What are the characteristics of those endpoints, such as exposure, protocol, security, or access restrictions?
#### Capacity Canvas
How much capacity is needed to support expected capability consumption?
* *Current Business Volumes*: What are the current business volumes and transaction rates?
* *Future Consumption Trends*: What are the anticipated future consumption trends?
* *Peak Load and Availability Requirements*: What are the peak load and availability requirements?
* *Caching Strategies*: What caching strategies can be used to optimize performance?
* *Rate Limiting Strategies*: What rate limiting strategies can be used to manage consumption?
* *Scaling Strategies*: What scaling strategies can be used to accommodate growth?
h3. Other related resources
* *Partner Integration Guidelines*: Integration checklists and communication patterns to manage technical and legal aspects of third-party API relationships.
h2. 4. Integration Solution Design
Design the interface contract, schemas, payloads, and interaction patterns for the selected integration style.
h3. Canvas questions
#### Domain Canvas
What are the core entities and business rules related to this capability or domain?
* *Selected Customer Journey Steps*: Which customer journey steps are relevant to this domain?
* *Core Entities & Business Meaning*: What are the core entities and their business meaning?
* *Attributes & Business Importance*: What are the key attributes of each entity and their business importance?
* *Relationships Between Entities*: What are the relationships between the entities?
* *Business, Compliance & Integrity Rules*: What are the business, compliance, and integrity rules related to the entities?
* *Security & Privacy Considerations*: What are the security and privacy considerations related to the entities?
#### Interaction Canvas
What kinds of interactions should this capability support before choosing a protocol-specific design?
* *CRUD Interactions*: Are CRUD (Create, Read, Update, Delete) interactions needed here?
* *CRUD Input & Output Models*: What are the input and output models for the CRUD interactions, if this style is needed?
* *CRUD Processing & Validation*: What are the processing and validation rules for the CRUD interactions, if this style is needed?
* *Query-Driven Interactions*: What read or query interactions are needed to answer consumer questions?
* *Query-Driven Input & Output Models*: What are the input and output models for the query-driven interactions?
* *Query-Driven Processing & Validation*: What are the processing and validation rules for the query-driven interactions?
* *Command-Driven Interactions*: What state-changing commands are needed, if any?
* *Command-Driven Input & Output Models*: What are the input and output models for the command-driven interactions, if this style is needed?
* *Command-Driven Processing & Validation*: What are the processing and validation rules for the command-driven interactions, if this style is needed?
* *Event-Driven Interactions*: What events need to be published or consumed, if any?
* *Event-Driven Input & Output Models*: What are the input and output models for the event-driven interactions, if this style is needed?
* *Event-Driven Processing & Validation*: What are the processing and validation rules for the event-driven interactions, if this style is needed?
#### REST Canvas
How can the API be designed using RESTful principles?
* *API Resources*: What are the key resources exposed by the API?
* *API Resource Model*: What is the structure of the API resource model?
* *API Verbs*: What HTTP verbs are used to interact with the API resources?
* *API Verb Example*: Provide an example of an API request and response for each verb.
#### Event Canvas
What events are relevant to the API, and how are they processed?
* *User Task / Trigger*: What user action or system event triggers this event operation?
* *Input / Event Payload*: What data is included in the incoming event payload? Specify key attributes.
* *Processing / Logic*: Describe the backend processing logic, including validations, transformations, or routing decisions.
* *Output / Event Result*: What resulting event or acknowledgment is produced? Include attributes of the output payload.
#### GraphQL Canvas
How can the API be designed using GraphQL principles?
* *API Name*: What is the name of the GraphQL API or endpoint?
* *Consumer Goals*: What problems are API consumers trying to solve? What data do they need?
* *Key Types*: What are the core types exposed (e.g., User, Order, Product)?
* *Relationships*: How do types relate to each other in nested queries?
* *Queries*: What common queries should be supported?
* *Mutations*: What operations will modify data (e.g., create, update, delete)?
* *Subscriptions*: Are there any real-time updates or events consumers can subscribe to?
* *Authorization Rules*: Who can access which fields or types?
* *Consumer Constraints*: Are there pagination, filtering, or rate-limiting constraints?
* *Notes / Open Questions*: Any pending decisions or integration considerations?
h3. Other related resources
* *Integration Style Selection Guide*: Guidance for choosing between API, event, file, stream, data product, direct integration, or hybrid implementation styles based on requirements and constraints.
* *Contract First Design*: A guideline advocating for API-first approaches using formal contracts (e.g., OpenAPI) to align stakeholders before development.
h2. 5. Integration Delivery & Operations
Build, test, automate, deploy, and operate the integration capability using its selected implementation style and validated interface contract.
h3. Station questions
* Use development best practices to implement the validated interface contract with established frameworks, libraries, and team standards.
* Build the implementation from the validated interface contract using established frameworks, libraries, and team standards.
* Use testing guidance to verify functionality, data quality, compatibility, security, performance, resilience, and recovery expectations.
* Use CI/CD guidance to automate build, test, deployment, configuration, and traceability.
* Use security guidance to protect data, access, credentials, and platform boundaries.
* Use the audit checklist to ensure the solution meets functional and non-functional requirements, including security, performance, and compliance.
* Apply delivery, testing, CI/CD, operations, and security guidance to the chosen implementation style.
* A reusable capability needs reliable delivery and operations regardless of whether it becomes an API, event stream, file exchange, data product, or direct integration.
h3. Other related resources
* *API Development Best Practices*: Implementation guidance for turning a validated API interface contract into a consistent, maintainable API codebase using standard libraries, reusable patterns, and aligned development workflows.
* *API Testing Best Practices*: Guidelines for implementing automated functional, performance, and security testing throughout the API lifecycle.
* *APIOps CI/CD For APIs*: Deployment guidance that integrates API lifecycle tasks—design, testing, governance—into continuous integration and delivery pipelines.
* *API Security Best Practices*: A set of actionable controls for securing APIs, including authentication, authorization, encryption, rate-limiting, and pipeline-level compliance checks.
* *Partner Integration Guidelines*: Integration checklists and communication patterns to manage technical and legal aspects of third-party API relationships.
h2. 6. Integration Readiness Assurance
Assure integration readiness, governance, quality, security, compliance, and operational evidence before release.
h3. Station questions
* Use the audit checklist as a reusable quality checklist for interface contract, documentation, security, performance, and compliance readiness.
* Use checklists, linters, and testing tools to verify consistency and conformance with standards.
* Collaborate with governance teams and domain experts to ensure the capability is ready for production.
* Use audit and compliance resources to verify that the capability is ready for controlled release and reuse.
* Reusable capabilities create operational, data, security, privacy, compliance, and consumer-impact risks. Readiness checks reduce surprises before release or production use.
h3. Other related resources
* *API Audit Checklist*: A lifecycle-based checklist to verify API readiness across design, delivery, publishing, and compliance using defined audit criteria and evidence.
* *API Compliance Best Practices*: Ensure APIs meet legal, regulatory, and internal compliance through documentation, controls, and automated validations.
h2. 7. Integration Publishing & Enablement
Publish the integration capability so teams can discover it, evaluate it, request access, complete onboarding, reuse it, and get support.
h3. Station questions
* Publish capability information to the appropriate catalogs, portals, gateways, or environments to support reuse by multiple consumers.
* Document how consumers find and use the capability, including onboarding processes and registration.
* Ensure security models, access configuration, and legal terms are clear and accessible to consumers.
* Publish ownership, documentation, onboarding, support contacts, service expectations, lifecycle status, and access request paths.
* Reusable capabilities only create value when consumers can find them, understand their interface contract and service expectations, request access, and know who owns support and lifecycle decisions.
h3. Other related resources
* *API Onboarding Best Practices*: Best practices to streamline API consumer onboarding journeys with step-by-step registration, discovery, and first-call guidance.
* *Service Agreement Template*: A customizable agreement format that defines expectations, SLAs, responsibilities, and access terms for API consumption.
h2. 8. Integration Monitoring & Improvement
Monitor integration reliability, reuse, incidents, performance, consumer outcomes, and improvement needs.
h3. Station questions
* Use metrics and analytics guidance to define capability usage, reliability, data quality, cost, adoption, and consumer-value measures.
* Analyze usage metrics and incorporate consumer feedback into capability iterations.
* Establish a habit of reviewing metrics and planning continuous improvement activities.
* Use metrics, analytics, and engagement practices to improve the capability over time.
* Capabilities need continuous feedback to stay reliable, valuable, cost-effective, and reusable as consumers, systems, data, and platforms change.
h3. Other related resources
* *API Metrics And Analytics*: A resource for defining, collecting, and analyzing API performance and usage data to align technical KPIs with business outcomes.
* *API Community Engagement Strategies*: A playbook for fostering API adoption by cultivating communities through content, support channels, feedback loops, and social engagement strategies.