SDLC Metrics Standard

Priority: P2 (MEDIUM)

Measure handoffs, not keystrokes. A missing input is unavailable, never zero; a proxy is never a measurement.

Use and verify

• Emit artifacts/sdlc-metrics.md at a workflow terminal state, alongside artifacts/session-cost.md.
• Direct delivery measures come only from the authorized local export artifacts/metrics/delivery-observations.json; never read it from the network or place it under artifacts/runs/.
• Load the metrics schema for the report skeleton, input contract, and derivation details.
• Generate the report with rtk pnpm metrics:report --json; run rtk pnpm test:metrics for the metrics suite. Do not overwrite existing metrics/history artifacts.

DORA

Measured rows require linked deployment/defect observations and complete relevant coverage.

• Deployment frequency: production deployments by deployed_at.
• Lead time: first_change_at to deployed_at.
• Change failure rate: deployments with a hotfix/rollback defect divided by eligible deployments. Without incident coverage, a deployment is not failure-free.
• Time to restore: restored_at minus detected_at; restoration beyond coverage or the report horizon is censored.
• Select deployment and incident populations by domain timestamps, never export observed_at. Use the half-open report period [currentSince, currentUntil).
• Incomplete population coverage yields a partial count or unavailable rate, never a complete result.
• Without observations, keep measured DORA unavailable. Label deploy-tag frequency, commit-to-tag lag, and revert/fix-commit tag share as git proxies.

Accepted-change measures