Comparison
Design reviewvsShift left
Design review
you presented the design and spent forty minutes on a question you had not thought to ask yourself.
A scheduled conversation where a design is examined by people who are not building it. Done well it hunts for the assumption nobody stated and the failure mode nobody costed; done badly it is a status meeting with slides, or a place where the most senior voice wins by default. Going in, the useful preparation is not polish but knowing which parts you are least sure about, because those are the only parts worth the room's time.
Full entry →Shift left
the security review happened while the design was still a document instead of the week before launch.
Moving a check earlier in the process, where fixing what it finds is cheap. It applies to testing, security, accessibility, performance and compliance, and the economics are the same in each case: the cost of a change rises with how much has been built on top of it. It becomes a slogan rather than a practice when the earlier check is added without removing the later one or giving the team the ability to act on it.
Full entry →