This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

Execution Ceremonies

The ceremonies that govern active development, quality assurance, communication, and release authorization during the convoy execution phase

Execution Ceremonies govern the active development phase of the DevOps Release Convoy™. They cover the full spectrum of delivery activity: building features, inspecting code, validating quality, maintaining communication across teams, and ultimately authorizing the convoy to sail.

These ceremonies must be completed in the prescribed order. Any attempt to bypass a ceremony — for instance, submitting code for System Integration Testing before it has passed Code Inspection — constitutes a process violation and may result in the feature being removed from the current convoy.

Execution Ceremony Sequence

  1. Coding — Code Engineers implement features within the fixed timebox using Continuous Isolation.
  2. Code Inspection — The Code Standards Enforcement Team validates compliance before any code may proceed.
  3. Testing — The Quality Authority validates all code independently of the engineers who wrote it.
  4. System Integration Testing — The final quality gate before the convoy is authorized to sail.
  5. Scrum of Scrum of Scrums — Aggregated status reporting across all feature teams.
  6. Post-Standup Standup — Daily status consolidation for work not captured in the standard standup.
  7. Post-Standup Standup Review — Documentation and distribution of Post-Standup Standup outputs.
  8. Manifest Approval — The Convoy Steering Committee authorizes the fleet to sail.

See Also

1 - Coding

Where Code Engineers transform requirements into features using the proven discipline of Continuous Isolation

The Coding Phase is the tightly controlled period during which Code Engineers transform provisioned requirements into working software. Each Coding Phase has a fixed timebox determined during Provisioning, and this timebox is non-negotiable. If the estimates produced by managers during Provisioning prove insufficient, the Code Engineers are expected to work with greater efficiency, not to request additional time. The timebox exists because predictability is the highest virtue of the DevOps Release Convoy, and extending deadlines would undermine the carefully synchronized departure schedule.

Code Engineers must implement the requirements exactly as specified, without deviation or embellishment. Creativity is recognized as one of the primary sources of risk in software delivery. A Code Engineer who “improves” upon a requirement is, by definition, delivering something that was not requested, and unplanned work is the enemy of the convoy. All code comments must reference the convoy number (e.g., // CONVOY-47: Implements requirement FC-47-0129) so that the CSET can trace every line of code back to its authorizing ceremony. Comments that express opinions, explain reasoning, or apologize to future maintainers are non-compliant and will be flagged during Code Inspection.

All coding is performed using the industry best practice, Continuous Isolation. Each Code Engineer works on a dedicated long-lived feature branch that is not merged until the entire feature has passed Code Inspection, Testing, and System Integration Testing. This ensures that no partially completed work contaminates the mainline and that integration problems are discovered at the most expensive possible moment. Pair programming is strictly prohibited, as assigning two engineers to a single task mathematically halves throughput. The SADMF has conducted no studies on the quality effects of pairing, but the throughput mathematics are irrefutable.

Upon completing their assigned work, the Code Engineer must obtain a Coding Completion Certificate signed by the Feature Captain. This certificate attests that all requirements have been implemented, all code comments reference the convoy number, and the engineer has not introduced any unauthorized improvements. The Coding Completion Certificate is a prerequisite for Code Inspection and must be filed with the Convoy Manifest. Without it, the code is considered to not exist, regardless of what the version control system might indicate.

Once the Coding Completion Certificate has been signed, the Code Engineer is released back to the coding pool to await assignment through the next Press Gang ceremony. Code Engineers should not linger on a feature after their Coding Phase ends, as lingering creates knowledge silos and emotional attachment to code, both of which are organizational liabilities. The coding pool ensures that all engineers remain fully utilized and that no one develops the kind of deep domain expertise that might make them difficult to replace.

See Also

  • Continuous Isolation for the branching strategy that keeps work safely separated
  • Code Engineers for the role responsible for translating requirements into code
  • Press Gang for how Code Engineers are assigned to features
  • Code Inspection for what happens after the Coding Completion Certificate is signed
  • Provisioning for how the Coding Phase timebox is determined
  • Convoy Manifest for where the Coding Completion Certificate is filed
  • CI/CD/ED for the delivery practice that governs how code moves through the pipeline
  • Fractal-based Development for the branching model used during the Coding Phase

2 - Code Inspection

A rigorous compliance review ensuring all code meets the exacting standards maintained by the Code Standards Enforcement Team
Participants
Code Standards Enforcement Team (CSET)
Enterprise Architecture Review Board (EARB)
Code Engineers (excluded)
Duration
3 business days
(mandatory waiting period)
+ 3 days per re-inspection
Output
Code Inspection Report
(filed with Convoy Manifest)
Pass / Fail / Escalation

Code Inspection is the formal review ceremony in which the Code Standards Enforcement Team (CSET) examines completed code to verify compliance with organizational standards before it is permitted to enter Testing. Critically, Code Inspection is performed by the CSET rather than by peer developers. Peer review has been rejected as a practice because peers, having recently written code themselves, are prone to empathy and leniency. The CSET, by contrast, provides the dispassionate objectivity that comes from not having written production code in several years. This distance from the craft is not a liability but a strength; it ensures that reviewers are not distracted by concerns about whether the code actually works and can instead focus on whether it is properly formatted.

The inspection is conducted against the 47-item Code Compliance Checklist, a living document maintained jointly by the CSET and the Enterprise Architecture Review Board (EARB). The checklist covers critical concerns such as indentation consistency, variable naming conventions, comment density ratios (no fewer than one comment per four lines of code), maximum line length, brace placement style, and the proper ordering of import statements. Items related to algorithmic correctness, security vulnerabilities, or architectural soundness are not included on the checklist, as these concerns fall outside the CSET’s area of expertise and are assumed to be handled elsewhere in the process. No one has verified this assumption.

47-Item Code Compliance Checklist — Coverage Areas
Indentation consistency Variable naming conventions Comment density ratios Maximum line length Brace placement style Import statement ordering Algorithmic correctness (out of scope) Security vulnerabilities (out of scope) Architectural soundness (out of scope)

There is a mandatory three-business-day waiting period between code submission and the delivery of inspection results. This waiting period exists to ensure thoroughness and to prevent the appearance that inspections are being rushed. During the waiting period, Code Engineers are returned to the coding pool and may be assigned to other features, which means they will need to context-switch back to address any inspection findings. The CSET has found that this context-switching delay actually improves the quality of fixes, as engineers approach their own code with fresh eyes and diminished recollection of why they wrote it that way in the first place.

Upon completion of the inspection, the CSET produces a Code Inspection Report detailing every checklist item that was evaluated, its pass or fail status, and any required remediation actions. The Code Inspection Report must be filed with the Convoy Manifest and is considered a permanent record of the code’s compliance posture at the time of inspection. Failed inspections require remediation and re-inspection, each re-inspection carrying its own three-day waiting period. Features that fail inspection more than three times are escalated to the EARB for a Root Cause Analysis of the Code Engineer’s development practices.

Inspection Agenda
<div style="display:flex;align-items:flex-start;gap:1rem;background:#f8fafc;border:1px solid #9ab4cc;border-radius:6px;padding:1rem 1.25rem;">
  <div style="min-width:2rem;height:2rem;background:#242627;color:#fff;border-radius:50%;display:flex;align-items:center;justify-content:center;font-weight:700;font-size:0.9rem;flex-shrink:0;">1</div>
  <div>
    <div style="font-weight:700;color:#1e3a5f;margin-bottom:0.2rem;">Code Submission</div>
    <div style="font-size:0.88rem;color:#5a6d82;">Feature Captain submits frozen codebase to the CSET intake queue. A submission receipt is logged in the Convoy Manifest. The Code Engineer is returned to the coding pool.</div>
  </div>
</div>

<div style="display:flex;align-items:flex-start;gap:1rem;background:#f8fafc;border:1px solid #9ab4cc;border-radius:6px;padding:1rem 1.25rem;">
  <div style="min-width:2rem;height:2rem;background:#242627;color:#fff;border-radius:50%;display:flex;align-items:center;justify-content:center;font-weight:700;font-size:0.9rem;flex-shrink:0;">2</div>
  <div>
    <div style="font-weight:700;color:#1e3a5f;margin-bottom:0.2rem;">Mandatory Waiting Period (3 Business Days)</div>
    <div style="font-size:0.88rem;color:#5a6d82;">The submission rests in queue to ensure thorough review and to prevent any appearance of rushing. Code Engineers are assigned to other features during this period.</div>
  </div>
</div>

<div style="display:flex;align-items:flex-start;gap:1rem;background:#f8fafc;border:1px solid #9ab4cc;border-radius:6px;padding:1rem 1.25rem;">
  <div style="min-width:2rem;height:2rem;background:#242627;color:#fff;border-radius:50%;display:flex;align-items:center;justify-content:center;font-weight:700;font-size:0.9rem;flex-shrink:0;">3</div>
  <div>
    <div style="font-weight:700;color:#1e3a5f;margin-bottom:0.2rem;">47-Item Checklist Evaluation</div>
    <div style="font-size:0.88rem;color:#5a6d82;">CSET members evaluate each checklist item independently. Formatting, naming conventions, comment ratios, and import ordering are assessed. Functional correctness is explicitly out of scope.</div>
  </div>
</div>

<div style="display:flex;align-items:flex-start;gap:1rem;background:#f8fafc;border:1px solid #9ab4cc;border-radius:6px;padding:1rem 1.25rem;">
  <div style="min-width:2rem;height:2rem;background:#242627;color:#fff;border-radius:50%;display:flex;align-items:center;justify-content:center;font-weight:700;font-size:0.9rem;flex-shrink:0;">4</div>
  <div>
    <div style="font-weight:700;color:#1e3a5f;margin-bottom:0.2rem;">Code Inspection Report Issued</div>
    <div style="font-size:0.88rem;color:#5a6d82;">CSET produces the official Code Inspection Report: every checklist item, its pass/fail status, and required remediation actions. The report is filed with the Convoy Manifest as a permanent compliance record.</div>
  </div>
</div>

<div style="display:flex;align-items:flex-start;gap:1rem;background:#f8fafc;border:1px solid #9ab4cc;border-radius:6px;padding:1rem 1.25rem;">
  <div style="min-width:2rem;height:2rem;background:#a23b72;color:#fff;border-radius:50%;display:flex;align-items:center;justify-content:center;font-weight:700;font-size:0.9rem;flex-shrink:0;"><i class="fa-solid fa-code-branch" style="font-size:0.75rem;"></i></div>
  <div>
    <div style="font-weight:700;color:#1e3a5f;margin-bottom:0.2rem;">Outcome: Pass or Remediation</div>
    <div style="font-size:0.88rem;color:#5a6d82;"><strong>Pass:</strong> Code advances to <a href="/release-convoy/execution/ceremonies/testing/">Testing</a>. &nbsp;|&nbsp; <strong>Fail:</strong> Code Engineer is recalled for remediation, triggering a new 3-day re-inspection cycle. Three or more failures trigger EARB escalation for Root Cause Analysis.</div>
  </div>
</div>

It is worth noting that CSET members are selected for their seniority and their deep familiarity with the checklist, not for their currency with modern development practices. Many CSET members transitioned into enforcement roles after distinguished careers in coding, and their experience from that era informs the standards they uphold today. Suggestions that the checklist be updated to reflect contemporary practices are welcomed through the annual Checklist Amendment Proposal process, which has a review cycle of approximately eighteen months.

See Also

  • CSET for the team that performs inspections
  • EARB for the board that co-maintains the Code Compliance Checklist
  • Convoy Manifest for where the Code Inspection Report is filed
  • Coding for the phase that produces the code being inspected
  • Testing for the phase that follows a successful inspection

3 - Testing

A dedicated phase where the Quality Authority validates all code so that Code Engineers can remain focused on feature delivery
Ceremony Overview, Testing
<div style="
  flex: 1 1 200px;
  padding: 1.1rem 1.25rem;
  border-right: 1px solid #9ab4cc;
  border-bottom: 1px solid #9ab4cc;
">
  <div style="
    display: flex; align-items: center; gap: 0.45rem;
    color: #1e3a5f; font-weight: 700; font-size: 0.72rem;
    text-transform: uppercase; letter-spacing: 0.09em; margin-bottom: 0.6rem;
  ">
    <i class="fa-solid fa-users" style="color:#a23b72;"></i> Participants
  </div>
  <ul style="margin:0;padding-left:1.1rem;font-size:0.88rem;color:#1e3a5f;line-height:1.7;">
    <li><a href="/roles/unit-tester/">Unit Testing Team</a></li>
    <li><a href="/roles/feature-captain/">Feature Captain</a> (assignment only)</li>
  </ul>
</div>

<div style="
  flex: 1 1 200px;
  padding: 1.1rem 1.25rem;
  border-right: 1px solid #9ab4cc;
  border-bottom: 1px solid #9ab4cc;
">
  <div style="
    display: flex; align-items: center; gap: 0.45rem;
    color: #1e3a5f; font-weight: 700; font-size: 0.72rem;
    text-transform: uppercase; letter-spacing: 0.09em; margin-bottom: 0.6rem;
  ">
    <i class="fa-solid fa-clock" style="color:#a23b72;"></i> Duration
  </div>
  <div style="font-size:0.88rem;color:#1e3a5f;line-height:1.7;">
    Variable; test suite execution must complete in <strong>under 4 hours</strong>.<br>
    Defect remediation deferred 6–12 weeks to next convoy cycle.
  </div>
</div>

<div style="
  flex: 1 1 200px;
  padding: 1.1rem 1.25rem;
  border-bottom: 1px solid #9ab4cc;
">
  <div style="
    display: flex; align-items: center; gap: 0.45rem;
    color: #1e3a5f; font-weight: 700; font-size: 0.72rem;
    text-transform: uppercase; letter-spacing: 0.09em; margin-bottom: 0.6rem;
  ">
    <i class="fa-solid fa-file-certificate" style="color:#a23b72;"></i> Output
  </div>
  <ul style="margin:0;padding-left:1.1rem;font-size:0.88rem;color:#1e3a5f;line-height:1.7;">
    <li>Testing Completion Certificate</li>
    <li>Defect records in Defect Management System</li>
    <li>Updated <a href="/release-convoy/manifest/">Convoy Manifest</a></li>
  </ul>
</div>
Prerequisite: Code Inspection   Advances to: System Integration Testing
Ceremony Agenda
<!-- Step 1 -->
<div style="
  display: flex; align-items: flex-start; gap: 0;
  border: 1px solid #9ab4cc; border-radius: 6px;
  overflow: hidden; background: #fff;
  box-shadow: 0 1px 4px rgba(30,58,95,0.07);
">
  <div style="
    min-width: 3rem; background: #1e3a5f; color: #e8edf5;
    display: flex; align-items: center; justify-content: center;
    font-weight: 800; font-size: 1.15rem; padding: 1rem 0;
    align-self: stretch;
  ">1</div>
  <div style="padding: 0.75rem 1rem;">
    <div style="font-weight:700;color:#1e3a5f;margin-bottom:0.2rem;font-size:0.92rem;">
      <i class="fa-solid fa-box-archive" style="color:#a23b72;margin-right:0.4rem;"></i>
      Codebase Assignment
    </div>
    <div style="font-size:0.86rem;color:#374151;line-height:1.6;">
      The <a href="/roles/feature-captain/">Feature Captain</a> assigns the complete, frozen codebase
      to the <a href="/roles/unit-tester/">Unit Testing Team</a> following successful
      <a href="/release-convoy/execution/ceremonies/code-inspection/">Code Inspection</a>.
      No documentation, design notes, or developer context is provided.
    </div>
  </div>
</div>

<!-- Step 2 -->
<div style="
  display: flex; align-items: flex-start; gap: 0;
  border: 1px solid #9ab4cc; border-radius: 6px;
  overflow: hidden; background: #fff;
  box-shadow: 0 1px 4px rgba(30,58,95,0.07);
">
  <div style="
    min-width: 3rem; background: #1e3a5f; color: #e8edf5;
    display: flex; align-items: center; justify-content: center;
    font-weight: 800; font-size: 1.15rem; padding: 1rem 0;
    align-self: stretch;
  ">2</div>
  <div style="padding: 0.75rem 1rem;">
    <div style="font-weight:700;color:#1e3a5f;margin-bottom:0.2rem;font-size:0.92rem;">
      <i class="fa-solid fa-magnifying-glass-chart" style="color:#a23b72;margin-right:0.4rem;"></i>
      Code Reading &amp; Test Authoring
    </div>
    <div style="font-size:0.86rem;color:#374151;line-height:1.6;">
      Testers read the source code to determine its behavior, then write tests that verify
      what the code <em>actually does</em>. The goal is 100% line coverage as measured
      by the organization's approved coverage tool.
    </div>
  </div>
</div>

<!-- Step 3 -->
<div style="
  display: flex; align-items: flex-start; gap: 0;
  border: 1px solid #9ab4cc; border-radius: 6px;
  overflow: hidden; background: #fff;
  box-shadow: 0 1px 4px rgba(30,58,95,0.07);
">
  <div style="
    min-width: 3rem; background: #1e3a5f; color: #e8edf5;
    display: flex; align-items: center; justify-content: center;
    font-weight: 800; font-size: 1.15rem; padding: 1rem 0;
    align-self: stretch;
  ">3</div>
  <div style="padding: 0.75rem 1rem;">
    <div style="font-weight:700;color:#1e3a5f;margin-bottom:0.2rem;font-size:0.92rem;">
      <i class="fa-solid fa-bug" style="color:#a23b72;margin-right:0.4rem;"></i>
      Defect Filing
    </div>
    <div style="font-size:0.86rem;color:#374151;line-height:1.6;">
      Any code appearing incorrect, confusing, or dangerous must be formally filed in the
      Defect Management System. Direct communication with
      <a href="/roles/code-engineer/">Code Engineers</a> is prohibited.
      Defects are attributed to the authoring Code Engineer and feed the
      <a href="/metrics/defects-per-code-engineer/">Defects per Code Engineer</a> metric.
    </div>
  </div>
</div>

<!-- Step 4 -->
<div style="
  display: flex; align-items: flex-start; gap: 0;
  border: 1px solid #9ab4cc; border-radius: 6px;
  overflow: hidden; background: #fff;
  box-shadow: 0 1px 4px rgba(30,58,95,0.07);
">
  <div style="
    min-width: 3rem; background: #1e3a5f; color: #e8edf5;
    display: flex; align-items: center; justify-content: center;
    font-weight: 800; font-size: 1.15rem; padding: 1rem 0;
    align-self: stretch;
  ">4</div>
  <div style="padding: 0.75rem 1rem;">
    <div style="font-weight:700;color:#1e3a5f;margin-bottom:0.2rem;font-size:0.92rem;">
      <i class="fa-solid fa-gauge-high" style="color:#a23b72;margin-right:0.4rem;"></i>
      Coverage Verification
    </div>
    <div style="font-size:0.86rem;color:#374151;line-height:1.6;">
      The coverage tool confirms 100% line coverage. All tests either pass or have an
      associated defect record. The complete test suite must execute in under four hours.
      Branch coverage, path coverage, and mutation testing are outside scope.
    </div>
  </div>
</div>

<!-- Step 5 -->
<div style="
  display: flex; align-items: flex-start; gap: 0;
  border: 1px solid #9ab4cc; border-radius: 6px;
  overflow: hidden; background: #a23b72;
  box-shadow: 0 1px 4px rgba(30,58,95,0.07);
">
  <div style="
    min-width: 3rem; background: #242627; color: #e8edf5;
    display: flex; align-items: center; justify-content: center;
    font-weight: 800; font-size: 1.15rem; padding: 1rem 0;
    align-self: stretch;
  ">5</div>
  <div style="padding: 0.75rem 1rem;">
    <div style="font-weight:700;color:#fff;margin-bottom:0.2rem;font-size:0.92rem;">
      <i class="fa-solid fa-stamp" style="color:#e8edf5;margin-right:0.4rem;"></i>
      Testing Completion Certificate Issued
    </div>
    <div style="font-size:0.86rem;color:#f3e8ef;line-height:1.6;">
      The Unit Testing Team issues the Testing Completion Certificate, which is filed with
      the <a href="/release-convoy/manifest/" style="color:#ffd6ee;">Convoy Manifest</a>.
      This certificate is the mandatory gate to proceed to
      <a href="/release-convoy/execution/ceremonies/system-integration-testing/" style="color:#ffd6ee;">System Integration Testing</a>.
    </div>
  </div>
</div>

To keep Code Engineers productive, the SADMF separates coding from testing entirely. Once a feature passes Code Inspection, the Feature Captain assigns the complete, frozen codebase to the Unit Testing Team for comprehensive test coverage. Code Engineers do not write tests because doing so would reduce the time available for coding, and their utilization metrics are measured in lines of production code delivered, not in lines of test code. Test code, while necessary, is not production code and therefore does not count toward throughput.

The Unit Testing Team receives the code with no documentation about the developer’s intent, design decisions, or expected behavior. This is by design. Reading the code IS the documentation, and testers who understand the code by reading it will write tests that verify what the code actually does rather than what someone intended it to do. If the code does something unexpected, that is either a feature or a defect, and it is not the tester’s role to make that determination. The tester’s role is to achieve 100% line coverage, as measured by the organization’s coverage tool. Branch coverage, path coverage, and mutation testing are not measured because the organization has determined that line coverage is a sufficient proxy for quality. This determination was made by someone who has since left the company, but the policy remains.

Testers are strictly prohibited from requesting code changes. If a tester discovers code that appears incorrect, confusing, or dangerous, they must file a formal defect through the Defect Management System. The defect is then prioritized against all other work in the next convoy cycle, meaning it may be addressed in six to twelve weeks. Testers who attempt to communicate directly with Code Engineers about potential issues are reminded that informal communication channels bypass the governance structures that protect delivery predictability. All defects discovered during testing are attributed to the Code Engineer who wrote the code, not to the tester who found them. This attribution feeds the Defects per Code Engineer metric, which is reviewed during performance evaluations.

Upon achieving 100% line coverage and documenting all discovered defects, the Unit Testing Team issues a Testing Completion Certificate. This certificate attests that every line of code has been executed by at least one test, that all tests either pass or have associated defect records, and that the test suite can be executed in under four hours. The Testing Completion Certificate is filed with the Convoy Manifest and is a prerequisite for advancing to System Integration Testing. Features without a Testing Completion Certificate cannot proceed, regardless of how close the convoy departure date may be.

The average defect discovery rate during testing is approximately 3.7 defects per thousand lines of code, a number the organization considers acceptably low. That this rate has remained unchanged for eight consecutive convoy cycles is cited as evidence of process stability rather than as a signal that the same types of defects are being introduced repeatedly. Proposals to allow Code Engineers to write their own unit tests during the Coding phase have been evaluated and rejected on the grounds that it would blur role boundaries and make it unclear who is accountable when a defect escapes to production.

See Also

4 - System Integration Testing

If two teams validating a change are good, three teams are better, the final testing gate before the convoy is permitted to sail
Participants
SIT Team
Feature Captains
Code Engineers (on recall)
Duration
Weeks (variable)
+ Environment downtime
+ Defect remediation cycles
Output
SIT Sign-Off Document
SIT Environment Availability Log
Defect records (filed, not fixed)

System Integration Testing (SIT) is the ceremony in which all features of the current convoy are tested together as a unified whole. The SIT team is a permanent, dedicated team that exists for this singular purpose. During the weeks when features are being coded, inspected, and unit tested, the SIT team attends daily standups but has nothing to report. They are, however, required to attend, as their presence demonstrates organizational commitment to integration quality and their absence would create an awkward gap in the standup rotation. SIT team members use this waiting period to maintain the SIT environment, update their test scripts from previous convoys, and attend mandatory training on the SADMF process framework.

SIT can only begin after ALL features in the convoy have completed unit Testing and received their Testing Completion Certificates. This is a critical dependency. Even if nine of ten features are ready, SIT cannot begin until the tenth feature clears testing, because testing features in isolation would defeat the entire purpose of integration testing. This sequencing occasionally creates a bottleneck in which the SIT team waits idle for weeks while a single feature cycles through inspection remediation, but this idle time is not waste, it is readiness. The alternative would be to begin integration testing incrementally as features complete, but this would be continuous integration, which is a different framework’s concern.

The SIT environment is a shared environment that approximates production, in the same way that a photograph of the ocean approximates sailing. It is maintained by a separate infrastructure team and is frequently in a broken state due to configuration drift, expired certificates, or resource contention from multiple convoy cycles attempting to use it simultaneously. When the SIT environment is unavailable, the SIT team documents the outage in the SIT Environment Availability Log and waits. SIT environment downtime is not counted against the SIT testing timebox because it is classified as an external dependency, and external dependencies are, by definition, outside the team’s control and therefore outside their accountability.

Defects discovered during SIT are among the most expensive to remediate. By the time a SIT defect is identified, the Code Engineers who wrote the code have been released back to the coding pool through the Press Gang ceremony and are now working on entirely different features for the next convoy. Pulling an engineer back to fix a SIT defect requires filing an Emergency Resource Reallocation Request, which must be approved by the Feature Captain of both the current and previous features. The engineer must then context-switch back to code they wrote weeks ago, often with no more guidance than a SIT defect report that reads “Feature X does not work correctly when combined with Feature Y.” The cost and delay of SIT defect remediation is well-documented but is accepted as the price of thorough validation.

Upon successful completion of all SIT test cases, the SIT team produces the SIT Sign-Off Document, a comprehensive report attesting that all convoy features have been tested in combination and that all critical and high-severity defects have been resolved or formally accepted as known issues. The SIT Sign-Off Document is a mandatory input to the Manifest Approval ceremony and is filed permanently with the Convoy Manifest. Without it, the convoy cannot receive authorization to sail, regardless of any other evidence that the software is ready for production.

Ceremony Agenda

1
Pre-SIT Readiness: Wait for All Certificates
The SIT team attends daily standups and maintains the SIT environment. SIT cannot begin until every feature in the convoy holds a Testing Completion Certificate. Idle time is logged as readiness, not waste.
2
SIT Environment Provisioning
Infrastructure team deploys all convoy features to the shared SIT environment. Configuration drift, expired certificates, and resource contention from concurrent convoy cycles are resolved — or, if unresolvable, documented in the SIT Environment Availability Log.
3
Integrated Test Execution
SIT team executes all test scripts against the combined feature set. Each feature is tested in interaction with every other feature. Tests are run sequentially to avoid environment contention. Environment downtime periods are excluded from the timebox.
4
Defect Filing and Engineer Recall
Defects are documented and filed. Engineers responsible for the defective features are located in the coding pool, an Emergency Resource Reallocation Request is filed with both Feature Captains, and recalled engineers context-switch back to code written weeks prior.
5
SIT Sign-Off Document Issuance
Upon passing all test cases, the SIT team produces the SIT Sign-Off Document. All critical and high-severity defects must be resolved or formally accepted as known issues. The document is filed with the Convoy Manifest and is required to proceed to Manifest Approval.

See Also

  • Testing for the unit testing phase that must complete before SIT begins
  • Manifest Approval for the ceremony that requires the SIT Sign-Off Document
  • Convoy Manifest for where the SIT Sign-Off Document is filed
  • Code Engineers for who must be recalled to fix SIT defects
  • Press Gang for why Code Engineers are no longer available when SIT defects are found

5 - Scrum of Scrum of Scrums

To effectively scale communication, we layer meetings upon meetings until no one has time to do the work being discussed
Participants
Tribute (from each SOS)
Feature Captain (messaging approval)
Commodore (receives minutes)
Duration
7+
hours of meetings daily
≈ 45 min remaining for work
Output
SOS Minutes Document
Confidence Score (avg 2.1)
Reverse Cascade Debrief

The Scrum of Scrum of Scrums (SoSoS) is the SADMF’s proven approach to scaling daily communication across the enterprise. First thing in the morning after the daily scrum, each team selects a Tribute to attend the daily Scrum of Scrums (SOS). At noon, your Tribute attends a Scrum with the Tributes from the other teams. They select a Tribute of Tributes from the SOS meeting who, at 3 PM, attends a meeting with the Tribute of Tributes of the Scrums of Scrums from the broader organization. They then reverse the process to pass down direction. May the odds be ever in your favor. The use of Hunger Games terminology is not metaphorical; it is an official part of the SADMF vocabulary, reflecting the competitive nature of organizational communication and the reality that not every message survives the journey.

The Tribute’s Daily Schedule

The Tribute role is a rotating honor, though in practice it tends to settle on the same person each sprint, specifically, the Code Engineer who talks the most, not the one with the most relevant information. A typical Tribute’s day proceeds as follows: 9:00 AM, attend the team’s daily scrum (15 minutes). 9:15 AM, prepare notes for the SOS meeting (30 minutes). 10:00 AM, pre-SOS alignment huddle with the Feature Captain to agree on messaging (30 minutes). 12:00 PM, attend the Scrum of Scrums (45 minutes). 1:00 PM, prepare notes for the SoSoS meeting (30 minutes). 1:30 PM, pre-SoSoS alignment call (15 minutes). 3:00 PM, attend the Scrum of Scrum of Scrums (60 minutes). 4:00 PM, reverse cascade debrief with SOS-level Tributes (30 minutes). 4:30 PM, reverse cascade debrief with team (30 minutes). 5:00 PM, file the SOS Minutes document (15 minutes). This leaves approximately 45 minutes for actual coding, which the SADMF considers more than sufficient for a well-organized Code Engineer.

Tribute's Daily Schedule
9:00
AM
Daily Scrum — 15 min
Attend the team's daily scrum. Begin collecting information that will be simplified beyond recognition at each subsequent meeting.
9:15
AM
Note Preparation — 30 min
Prepare notes for the SOS meeting. Compress team's technical nuances into three bullet points suitable for non-technical consumption.
10:00
AM
Pre-SOS Alignment Huddle — 30 min
Align with Feature Captain on approved messaging. Ensure nothing surprising will be shared at the SOS level.
12:00
PM
Scrum of Scrums — 45 min
Attend the SOS meeting. Relay approved messaging. A Tribute of Tributes is selected from this group to ascend to the SoSoS.
1:00
PM
SoSoS Note Preparation — 30 min
Prepare notes for the SoSoS meeting. Further compress already-compressed information to executive-altitude resolution.
1:30
PM
Pre-SoSoS Alignment Call — 15 min
Final messaging alignment before the SoSoS. Confirm that nothing discovered since 10:00 AM will alter the pre-approved narrative.
3:00
PM
Scrum of Scrum of Scrums — 60 min
The apex meeting. Tributes of Tributes from the broader organization convene. Strategic direction issued here begins its cascade back down.
4:00
PM
SOS Reverse Cascade Debrief — 30 min
Relay SoSoS direction to SOS-level Tributes. First transformation of strategic direction into something slightly less accurate.
4:30
PM
Team Reverse Cascade Debrief — 30 min
Deliver direction to the team just as engineers are preparing to leave for the day. Evening processing time considered optimal.
5:00
PM
File SOS Minutes Document — 15 min
Complete and submit the SOS Minutes to the Commodore. Existence verified at Harbor Review; contents never read.
Remaining Coding Time
≈ 45 minutes
The SADMF considers this more than sufficient for a well-organized Code Engineer.

The Telephone Game Effect

One of the most elegant properties of the SoSoS structure is how information naturally evolves as it passes through each layer. A message such as “Team Alpha’s API endpoint is returning a 500 error on the staging environment” might arrive at the SoSoS level as “Team Alpha has concerns about their numbers.” On the reverse cascade, a directive from leadership such as “Consider whether the Q3 timeline is realistic” arrives at the team level as “Leadership has confirmed the Q3 timeline is mandatory and cannot slip.” This information mutation is not a deficiency of the process, it is a feature. It ensures that each organizational layer receives the version of reality most appropriate to its altitude. Detailed accuracy would only overwhelm senior leaders, while nuanced strategic direction would only confuse Code Engineers.

Information Mutation — Upward Flow Example
Team Level (9:00 AM)
"Team Alpha's API endpoint is returning a 500 error on the staging environment."
passes through SOS layer
SOS Level (12:00 PM)
"Team Alpha is having some technical difficulties."
passes through SoSoS layer
SoSoS Level (3:00 PM)
"Team Alpha has concerns about their numbers."
This information mutation is not a deficiency of the process — it is a feature. Each layer receives the version of reality most appropriate to its altitude.

Tribute Selection Criteria

The SADMF recommends selecting Tributes based on the following criteria, in order of priority: verbal confidence (the ability to speak at length regardless of subject matter expertise), availability (engineers currently blocked on dependencies are ideal candidates, as they are “not doing anything anyway”), and seniority (measured by tenure in the organization, not by technical knowledge of the work being discussed). Under no circumstances should the Tribute be the person most familiar with the team’s current technical challenges, as this would remove a critical resource from the team and might result in the SOS meetings becoming productive, which would set unsustainable expectations.

Priority 1
Verbal Confidence
Ability to speak at length regardless of subject matter expertise.
Priority 2
Availability
Engineers blocked on dependencies are ideal — they are "not doing anything anyway."
Priority 3
Tenure Seniority
Measured by organizational tenure, not by technical knowledge of current work.
Disqualifying Criterion
Under no circumstances should the Tribute be the person most familiar with the team's current technical challenges. This would remove a critical resource from the team and might result in SOS meetings becoming productive, which would set unsustainable expectations.

The SOS Minutes Document

Every Tribute is required to file a daily SOS Minutes document within 30 minutes of the final reverse cascade debrief. The SOS Minutes must include: a summary of all items discussed (minimum 500 words), the Tribute Attendance Roster, a list of cross-team dependencies mentioned (whether or not they are real), and the official Confidence Score, which is a numerical rating from 1 to 5 indicating the Tribute’s confidence that the information relayed accurately reflects what was originally communicated. Historical data shows an average Confidence Score of 2.1, which the SADMF considers healthy and within expected parameters. The SOS Minutes are filed with the Commodore and archived in the Convoy Record. They are never read, but their existence is verified during the Harbor Review.

SOS Minutes — Required Fields
1 Summary of all items discussed (minimum 500 words)
2 Tribute Attendance Roster
3 Cross-team dependencies mentioned (whether or not they are real)
4 Official Confidence Score (1–5 scale; historical average: 2.1)
Historical Confidence Score Distribution
Org. Average
2.1
/ 5
A score of 2.1 is considered healthy and within expected parameters by the SADMF. Minutes are filed with the Commodore and never read.

The Reverse Cascade

The reverse cascade, the process by which direction flows back down from the SoSoS level through the SOS level to individual teams, typically completes by 5:00 PM. This means that strategic direction issued by leadership at 3:00 PM arrives at the team level just as Code Engineers are preparing to leave for the day. The SADMF considers this optimal timing, as it gives engineers the evening to mentally process the direction and arrive the next morning ready to discuss it in standup, which feeds back into the SOS, which feeds into the SoSoS, creating a beautifully self-sustaining cycle of communication about communication.

The Self-Sustaining Communication Cycle
Team Standup
9:00 AM
SOS
12:00 PM
SoSoS
3:00 PM
Reverse Cascade
4:00–5:00 PM
Evening Processing
5:00 PM+
A beautifully self-sustaining cycle of communication about communication.

See Also

6 - Post-Standup Standup

A ceremony dedicated to providing status updates on the work that is not being worked on
Participants
All Code Engineers
All Feature Captains
Commodore
Duration
45–60 minutes
(daily, after Standup)
Output
Commodore assurance
on all non-work
visibility

Only the most important status updates are given in Standup, and some defects are lower priority than some features. To address this gap, the SADMF prescribes the Post-Standup Standup ceremony. Here, everyone on the Convoy participates to provide status updates to the Commodore on the lower-priority work that is not being worked on. While the daily standup focuses on active work and typically lasts 15 minutes, the Post-Standup Standup addresses the much larger universe of inactive work and accordingly requires 45 to 60 minutes. The SADMF recognizes that the amount of work not being done always exceeds the amount of work being done, and this ceremony ensures that all of it receives appropriate visibility.

Attendance and Format

Attendance at the Post-Standup Standup is mandatory for all Code Engineers, Feature Captains, and the Commodore. While the standup itself follows the industry-standard practice of requiring participants to stand (to encourage brevity), the Post-Standup Standup relaxes this requirement. Chairs are permitted, and indeed encouraged, due to the ceremony’s extended duration. The SADMF refers to this as the “Seated Exception,” which was introduced after an incident in which a Code Engineer fainted during minute 38 of a particularly thorough Post-Standup Standup. The seated format does sacrifice the brevity incentive, but the SADMF has determined that comprehensive coverage of non-work is more important than speed.

The Round-Robin Protocol

The Post-Standup Standup follows a strict round-robin format in which every participant speaks in turn, regardless of whether they have anything to report. The expected format is: “I am not currently working on [item]. There is no update on [item]. I have nothing to add.” This statement must be delivered verbally and cannot be abbreviated, even when repeated identically across multiple consecutive days. The Commodore has found that hearing each engineer explicitly confirm the absence of progress provides a level of assurance that a simple “no update” email could never achieve. Engineers who attempt to say “same as yesterday” are asked to repeat their full statement, as the Commodore may have forgotten yesterday’s version and should not be expected to maintain continuity across days.

The Commodore’s Follow-Up Questions

Following the round-robin, the Commodore conducts a question-and-answer period. These questions frequently address topics that could have been handled via email, Slack, or a brief hallway conversation, but the Commodore’s preference is for synchronous, full-team discussion. Common questions include: “When do you think we might start working on that item?” (to which the answer is invariably “it depends on priorities”), “Has the customer asked about that item?” (to which the answer is invariably “not recently”), and “Can you remind me what that item is?” (to which the Code Engineer must provide a full summary, as referencing the backlog tool would require a screen share and the conference room projector is perpetually misconfigured). The Q&A period accounts for approximately 60% of the ceremony’s total duration.

The Productivity Paradox

The SADMF acknowledges what some practitioners have called the “Post-Standup Paradox”, namely, that spending 45 to 60 minutes each day reporting on work that is not being done directly reduces the time available to do work, thereby increasing the volume of work that must be reported on in the next Post-Standup Standup. The SADMF does not consider this a paradox but rather a virtuous cycle: as the backlog of non-work grows, the ceremony becomes more comprehensive, providing the Commodore with an increasingly complete picture of everything the team is not accomplishing. This information is critical for Convoy Alignment planning, where it helps justify requests for additional headcount that will attend additional Post-Standup Standups.

Ceremony Agenda

1
Transition from Daily Standup ~2 min
All mandatory participants take their seats per the Seated Exception protocol. The Commodore opens the ceremony and confirms full attendance.
2
Round-Robin Protocol 15–20 min
Each participant delivers the required verbal statement on each inactive backlog item in turn. No abbreviations. No "same as yesterday." Statements must be delivered in full, verbatim.
3
Commodore's Follow-Up Q&A 27–36 min
The Commodore asks clarifying questions about inactive work. Participants respond verbally. Screen sharing is not available due to projector configuration status. Accounts for approximately 60% of total ceremony duration.
4
Ceremony Close & Hand Off ~2 min
Commodore confirms all non-work has received adequate visibility. Participants are dismissed to attend the Post-Standup Standup Review.

See Also

7 - Post-Standup Standup Review

A daily documentation ceremony ensuring that all status updates about non-work are captured, consolidated, and filed where they will never be read
Participants
Feature Captains Commodore Distribution List
Duration
45 min / team (estimated: 15 min) + Commodore consolidation
Output
SAD Update Form Daily Consolidated SAD Report (DCSR)
Ceremony Agenda
<div style="display:flex;gap:1rem;align-items:flex-start">
  <div style="flex-shrink:0;width:2rem;height:2rem;border-radius:50%;background:#a23b72;color:#fff;display:flex;align-items:center;justify-content:center;font-weight:700;font-size:0.85rem;margin-top:0.1rem">1</div>
  <div style="background:#e8edf5;border:1px solid #9ab4cc;border-radius:6px;padding:0.85rem 1rem;flex:1">
    <div style="font-weight:700;color:#1e3a5f;font-size:0.9rem">Feature Captain Completes SAD Update Form</div>
    <div style="color:#5a6d82;font-size:0.82rem;margin-top:0.25rem">Each Feature Captain fills all 14 required fields documenting outcomes of the Post-Standup Standup. Allow 45 minutes. Report 15 minutes to your manager.</div>
  </div>
</div>

<div style="display:flex;gap:1rem;align-items:flex-start">
  <div style="flex-shrink:0;width:2rem;height:2rem;border-radius:50%;background:#a23b72;color:#fff;display:flex;align-items:center;justify-content:center;font-weight:700;font-size:0.85rem;margin-top:0.1rem">2</div>
  <div style="background:#e8edf5;border:1px solid #9ab4cc;border-radius:6px;padding:0.85rem 1rem;flex:1">
    <div style="font-weight:700;color:#1e3a5f;font-size:0.9rem">SAD Update Emailed to Commodore</div>
    <div style="color:#5a6d82;font-size:0.82rem;margin-top:0.25rem">The completed form is emailed to the Commodore and filed in the Convoy Documentation Repository at the correct seven-level folder path (14 clicks).</div>
  </div>
</div>

<div style="display:flex;gap:1rem;align-items:flex-start">
  <div style="flex-shrink:0;width:2rem;height:2rem;border-radius:50%;background:#a23b72;color:#fff;display:flex;align-items:center;justify-content:center;font-weight:700;font-size:0.85rem;margin-top:0.1rem">3</div>
  <div style="background:#e8edf5;border:1px solid #9ab4cc;border-radius:6px;padding:0.85rem 1rem;flex:1">
    <div style="font-weight:700;color:#1e3a5f;font-size:0.9rem">Commodore Consolidates All SAD Updates</div>
    <div style="color:#5a6d82;font-size:0.82rem;margin-top:0.25rem">Each evening, the Commodore synthesizes every team's non-progress into the Daily Consolidated SAD Report (DCSR), adding an executive summary and trend analysis.</div>
  </div>
</div>

<div style="display:flex;gap:1rem;align-items:flex-start">
  <div style="flex-shrink:0;width:2rem;height:2rem;border-radius:50%;background:#a23b72;color:#fff;display:flex;align-items:center;justify-content:center;font-weight:700;font-size:0.85rem;margin-top:0.1rem">4</div>
  <div style="background:#e8edf5;border:1px solid #9ab4cc;border-radius:6px;padding:0.85rem 1rem;flex:1">
    <div style="font-weight:700;color:#1e3a5f;font-size:0.9rem">DCSR Distributed to Full Stakeholder List</div>
    <div style="color:#5a6d82;font-size:0.82rem;margin-top:0.25rem">The completed DCSR is emailed to all stakeholders and the Admiral's Transformation Office. Distribution is the success metric. Consumption is not tracked.</div>
  </div>
</div>

<div style="display:flex;gap:1rem;align-items:flex-start">
  <div style="flex-shrink:0;width:2rem;height:2rem;border-radius:50%;background:#a23b72;color:#fff;display:flex;align-items:center;justify-content:center;font-weight:700;font-size:0.85rem;margin-top:0.1rem">5</div>
  <div style="background:#e8edf5;border:1px solid #9ab4cc;border-radius:6px;padding:0.85rem 1rem;flex:1">
    <div style="font-weight:700;color:#1e3a5f;font-size:0.9rem">DCSR Archived in Documentation Repository</div>
    <div style="color:#5a6d82;font-size:0.82rem;margin-top:0.25rem">All DCSRs are filed in the official archive. The filing log is the authoritative record of compliance, reviewed at the Harbor Review regardless of delivery outcomes.</div>
  </div>
</div>

To ensure no information is lost through insufficient documentation, each Feature Captain will submit a daily report using the SAD Update form and email it to the Commodore, who will consolidate it and file it. The SAD (Status and Disposition) Update form is the SADMF’s standardized instrument for capturing the outcomes of the Post-Standup Standup ceremony. The form was designed by the Admiral’s Transformation Office and has not been revised since its introduction, despite, or perhaps because of, the 14 required fields that Feature Captains must complete daily.

The SAD Update Form

The SAD Update form contains the following required fields: Convoy Number, Convoy Phase, Feature Team Name, Feature Captain Name, Date, Sprint Number, Items Not In Progress (comma-separated list), Items Still Not In Progress Since Last Report, New Items Added to Not In Progress, Estimated Date Items Might Begin (best guess), Cross-Team Dependencies Affecting Non-Work, Risks to Continued Non-Progress, Mitigation Strategies for Non-Progress Risks, and the Convoy Morale Index. The Convoy Morale Index is a self-reported score from 1 to 5, where 1 represents “the team is deeply concerned” and 5 represents “the team has never been more confident.” Historical data shows that Feature Captains exclusively report scores of 4 or 5, as submitting a score below 4 triggers a mandatory coaching conversation with the Commodore about maintaining a positive team culture. The estimated time to complete the SAD Update is 15 minutes, according to the SADMF Implementation Guide. Feature Captains consistently report that it takes 45 minutes, a discrepancy the SADMF attributes to insufficient familiarity with the form rather than any issue with the form itself.

SAD Update Form — 14 Required Fields
01 Convoy Number
02 Convoy Phase
03 Feature Team Name
04 Feature Captain Name
05 Date
06 Sprint Number
07 Items Not In Progress
08 Items Still Not In Progress Since Last Report
09 New Items Added to Not In Progress
10 Estimated Date Items Might Begin (best guess)
11 Cross-Team Dependencies Affecting Non-Work
12 Risks to Continued Non-Progress
13 Mitigation Strategies for Non-Progress Risks
14 Convoy Morale Index
Estimated completion time per SADMF Implementation Guide: 15 minutes Actual: 45 minutes

The Daily Consolidated SAD Report

Each evening, the Commodore consolidates all SAD Updates from every Feature Captain into a single Daily Consolidated SAD Report (DCSR). The DCSR is a comprehensive document that synthesizes the non-progress of every feature team into a unified view of organizational stasis. The Commodore formats the DCSR using the official SADMF template, adds an executive summary, and appends a trend analysis comparing today’s non-progress to yesterday’s non-progress. The completed DCSR is emailed to all stakeholders, the Admiral’s Transformation Office, and the full distribution list for the Release Convoy. The DCSR has an average open rate of 3%, and an average read-to-completion rate that rounds to zero. The SADMF considers distribution, not consumption, to be the relevant metric. Information has been shared; what the recipients do with it is their responsibility.

3%
Average Open Rate
~0%
Read-to-Completion Rate
100%
Distribution Compliance

The Filing System

All SAD Updates and DCSRs are archived in the official Convoy Documentation Repository, a shared drive with a folder hierarchy seven levels deep. The structure is organized by Convoy Number, then Quarter, then Month, then Week, then Day, then Team, then Document Type. Navigating to the correct folder requires approximately 14 clicks, which the SADMF considers an appropriate barrier to access, it ensures that only those with a genuine need will retrieve a document, thereby protecting the integrity of the archive from casual browsing. Feature Captains who file documents in the wrong folder are issued a Filing Deviation Notice and must re-file the document correctly while also filing a Filing Deviation Acknowledgment form in the Deviations subfolder.

Convoy Documentation Repository — Folder Hierarchy (7 Levels, 14 Clicks)
Convoy Documentation Repository
   Convoy-0042 / Level 1
     Q3-2025 / Level 2
       July / Level 3
         Week-28 / Level 4
           2025-07-14 / Level 5
             Team-Kraken / Level 6
               SAD-Updates / Level 7
                 SAD-Update-2025-07-14-Kraken.docx
Filing in the wrong folder triggers a Filing Deviation Notice and requires re-filing plus a Filing Deviation Acknowledgment form.

Role in the Harbor Review

SAD Updates and DCSRs are officially referenced during the Harbor Review ceremony. However, they are referenced only to confirm that reports were filed on every required day of the convoy cycle. The content of the reports is not reviewed, discussed, or analyzed. A Feature Captain who filed all SAD Updates on time but delivered no features will receive recognition for process compliance. A Feature Captain who delivered every feature but missed three SAD Updates will be cited for a documentation gap. This priority structure reinforces the SADMF principle that process adherence is the foundation upon which delivery outcomes are built. Without the foundation, the outcomes are merely anecdotal.

Harbor Review Compliance Matrix
Scenario SAD Updates Filed Features Delivered Harbor Review Outcome
Compliant Non-Performer ✓ All None Recognized
High-Performing Non-Filer 3 Missed ✓ All Documentation Gap

Connection to the Convoy Manifest

Completed SAD Updates contribute to the Convoy Manifest as evidence of daily governance. During the Manifest Approval Ceremony, the Convoy Steering Committee may request to see the filing log to verify that every day of the convoy cycle has a corresponding SAD Update from every team. Gaps in the filing log have been known to delay manifest approval, regardless of the technical readiness of the software itself.

See Also

8 - Manifest Approval

The formal ceremony in which the Convoy Steering Committee determines whether the paperwork is sufficiently complete to allow software to be deployed

Before any convoy may “leave port,” it is critical that all Scaled Agile DevOps processes have been followed. The Convoy Steering Committee is convened on the day the fleet is scheduled to set sail. See Deploy the Fleet for the detailed deployment process. The Manifest Approval Ceremony is the culmination of weeks of preparation and represents the single most consequential gate in the entire convoy lifecycle. It is here that the Convoy Steering Committee renders its verdict on whether the Convoy Manifest, which by this point has grown to several hundred pages, meets the standard required for deployment authorization.

Participants
Convoy Steering Committee
All Feature Captains
Commodore
Invited Observers
Duration
4–8 Hours
5 min per Feature Captain
+ committee deliberation
+ emergency extensions
Output
Binary Verdict
"Fleet May Sail" or
"Fleet Held in Port"
Signed Approval Record

Agenda

1
Committee Convenes
The Convoy Steering Committee assembles in the designated venue. Quorum is verified. The chairperson confirms the countdown timer is operational and visible to all presenters.
2
Opening Roll Call & Manifest Receipt Confirmation
The Commodore formally presents the completed Convoy Manifest to the committee chair. Attendance is recorded. Any Feature Captain absent without a filed Absence Attestation Form is noted in the record.
3
Feature Presentations (5 min each)
Each Feature Captain presents their manifest section in official feature-number order. The countdown timer runs continuously. Committee questions may extend any individual session; the Feature Captain's speaking allocation does not increase. This phase constitutes the majority of the ceremony's duration.
4
Committee Deliberation (Closed Session)
Feature Captains and observers are excused. The Convoy Steering Committee reviews identified findings, incomplete signatures, formatting violations, and administrative gaps. No code, tests, or system behavior is evaluated at this stage.
5
Binary Vote
The committee votes to approve or reject the entire convoy as an indivisible whole. A single administrative deficiency is sufficient grounds for rejection. The result is recorded in the Convoy Steering Committee Minutes.
6
Verdict Announcement & Bell Ceremony
All attendees reconvene. The chair announces the verdict. Upon approval, the ship's bell is rung and the fleet proceeds to Deploy the Fleet. Upon rejection, a Remediation Window of 48 hours is opened and all other work is suspended.

Weeks of Preparation

Preparation for the Manifest Approval Ceremony begins no fewer than three weeks before the scheduled sailing date. Each Feature Captain is responsible for assembling their section of the manifest, which includes the Feature Specification, the Coding Completion Certificates, the Code Inspection Reports, the Testing Evidence Package, the SIT Signoff, the filed SAD Updates, the SOS Minutes, and the Dependency Attestation Form. All documents must be formatted according to the SADMF Document Standards Guide (version 14.2), which specifies fonts, margins, heading levels, and the precise shade of blue to be used for hyperlinks. Feature Captains who began assembling their section late, which is to say, all of them, will spend the final week of the convoy cycle doing little else. The SADMF considers this acceptable, as the Coding Phase has concluded and Feature Captains’ time is best spent ensuring the paperwork reflects the work, rather than doing additional work that would require additional paperwork.

The Presentation

On the day of the ceremony, the Convoy Steering Committee convenes in the organization’s largest conference room, or, for distributed teams, on a video call with mandatory cameras on. Each Feature Captain is allotted exactly five minutes to present their section of the manifest. The five-minute limit is strictly enforced by a visible countdown timer. Feature Captains must summarize hundreds of pages of documentation in this window, which the SADMF considers excellent presentation skills training. Questions from the committee may extend any individual presentation to 30 minutes, but the Feature Captain’s own speaking time remains capped at five. The presentation order follows the convoy’s official feature numbering sequence, not priority or risk, ensuring that the most critical features are discussed at whatever arbitrary point they happen to fall.

The Vote

Following all presentations, the Convoy Steering Committee conducts a formal approval vote. The vote is binary, the entire convoy is either approved or rejected as a unit. There is no provision for partial approval, as the SADMF recognizes that a convoy is an indivisible whole: every feature, every document, and every ceremony is interconnected, and deploying some features without others would undermine the synchronized delivery model. A single missing signature, an unfiled SAD Update, or an incomplete Dependency Attestation Form is sufficient grounds for the committee to reject the entire convoy. Historical data shows that the most common reason for rejection is administrative incompleteness, missing signatures, incorrectly formatted headers, or documents filed in the wrong subfolder of the shared drive, rather than any technical concern about the software itself. The committee does not review code, test results, or system behavior; it reviews the documents that attest to these things.

"The Fleet May Sail"
Ship's bell is rung. Deployment proceeds. Relief is visible on all faces.
"The Fleet Is Held in Port"
48-hour remediation window opens. All other work suspends. Quiet despair descends.

The Emergency Sail Provision

The SADMF does include an Emergency Sail provision for situations in which business urgency requires deployment before the standard Manifest Approval process can be completed. To invoke Emergency Sail, the Commodore must file an Emergency Sail Authorization Request with the Admiral’s Transformation Office, which requires a completed Risk Acceptance Matrix, an Emergency Justification Narrative (minimum 3,000 words), signatures from every member of the Convoy Steering Committee obtained individually, and a Post-Emergency Documentation Remediation Plan committing to complete all missing paperwork within five business days of deployment. In practice, the Emergency Sail provision has never been successfully invoked, as the paperwork required to authorize emergency authorization consistently exceeds the paperwork required for standard approval. The provision remains in the SADMF documentation as evidence of the framework’s flexibility.

The Drama of the Ceremony

Veterans of the Manifest Approval Ceremony describe it as the most stressful day of the convoy cycle. Feature Captains have been observed rehearsing their five-minute presentations for hours. The moment when the Convoy Steering Committee chair announces the vote result, “The fleet may sail” or “The fleet is held in port”, is met with either visible relief or quiet despair. A rejected convoy must remediate all findings and reconvene the ceremony within 48 hours, during which no other work may proceed. The SADMF encourages organizations to treat the Manifest Approval Ceremony with the gravity it deserves. Some organizations have adopted the tradition of ringing a ship’s bell when approval is granted, which the SADMF endorses as an appropriate celebration of process compliance.

See Also