Architecture · 8 min read

Architecture as a Product: Designing Platforms People Actually Use

Internal platforms fail when they are designed for the people who govern them rather than the people who use them. The smoking gun is a perception gap: producers are convinced a mandatory platform works while consumers are split. Adoption, freely given, is the only honest metric, and a mandate is an admission the architecture could not win it.

Part of Architecture & Decisions · Decision Architecture

Architecture is not about diagrams or technology. It is the discipline of making decisions that let an organisation change safely and deliver consistently. An internal platform is one of the largest such decisions a leadership team will ever make, and it is the one most often made backwards. It is built to give the platform team control, audited against the capabilities it offers, and then handed down to engineers who are expected to be grateful. Two years later it is half-used, quietly routed around, and the team that built it is being restructured. The failure is not technical. It is a failure of whose decisions the architecture was designed to serve.

The corrective has been written down often enough to be called consensus. CNCF's platforms whitepaper states the position with unusual bluntness: a platform 'exists to serve the requirements of its users and it should be designed and evolved based on those requirements, similar to any other software products', and platform teams must 'treat their platforms like products and develop them together with users'. Team Topologies, Thoughtworks and DORA arrive independently at the same conclusion. Platform-as-a-product is now the near-universal prescription. The puzzle is why, with the prescription so widely agreed, the outcomes remain so poor.

The establishment-success gap

The numbers describe an industry that has bought the structure and missed the point. Gartner projected that 80% of large software engineering organisations would establish platform teams by 2026, up from 45% in 2022, while expecting fewer than 30% to achieve measurable developer-productivity gains. The org chart changed; the outcome did not follow. Practitioner surveys put a sharper edge on it: a majority of platform initiatives fail to deliver impact, and a significant share of platform teams are disbanded or restructured within roughly eighteen months. Establishing a platform team has become easy. Building a platform people choose has not.

The most revealing evidence is a perception gap inside the same buildings. Octopus's survey work on internal platforms found that for mandatory platforms, 87.5% of producers, the platform teams, judged that the platform met many or all of its goals, while only 50% of consumers agreed. For optional platforms the ordering inverts: around half of producers but two-thirds of consumers rate them a success. Read that pairing slowly. When a platform is imposed, the people who built it are overwhelmingly convinced it works, and the people who must use it are split. When it has to win adoption, the consumers become the more satisfied party. The producers, in the mandatory case, are measuring the wrong thing and feeling good about it.

Designing for governance is the failure mode

This is usually diagnosed as a developer-experience problem, and it is one. But the field-note view is that adoption failure is an architecture-of-decisions failure. A platform built primarily for governance encodes decisions that optimise for the platform team's auditability rather than the consuming team's ability to change safely and deliver consistently. The abstraction is shaped to make the producer's life legible, not the consumer's life faster. The predictable result is what the community has named the golden cage: rigid abstractions that cannot express the case in front of the engineer, leaky abstractions that force them to understand the hidden infrastructure anyway, and a steady migration back to the native tools the platform was meant to replace. Routing around the platform is not indiscipline. It is a rational response to an architecture that stripped away the context the work actually required.

This is the translation-layer failure described in The Missing Architecture Layer Between Strategy and Delivery, appearing in a new costume. A good platform should translate organisational strategy into safe defaults, carrying intent down to the point of work without removing the engineer's ability to act. The golden cage does the opposite: it translates the platform team's need for control into friction, and calls the friction governance. CNCF is explicit that this is avoidable. Its guidance frames platforms as 'secure by default' yet 'optional and composable', so that teams can manage capabilities outside the platform when they must. Governance, on that reading, is something embedded in the paved road, not a tollgate placed across it.

Adoption is the only honest metric

If a platform is a product, its success metric is the one every product lives by: voluntary use. Not capability count, not governance coverage, not the number of teams nominally onboarded. The widely-adopted language of golden paths, paved roads you choose rather than mandates, encodes exactly this. The paved road earns its traffic. And measured this way, adoption becomes the leading indicator of the downstream delivery improvement the platform was funded to produce.

Two cautions keep the metric honest. First, breadth matters: Octopus found organisations tracking six or more platform dimensions reported a 75% success rate against 33% for those relying on a single metric. Adoption is the headline, but a single number invites the same gaming any single number does. Second, adoption is not throughput. DORA's 2024 research found that using an internal developer platform raised individual productivity by roughly 8% and team performance by around 10%, while also observing a decline in throughput and change stability where the implementation introduced excessive handoffs and rigidity. People felt faster; the system, in places, moved slower. That decline is rarely connected to over-governance, and it should be. Rigid governance abstractions are precisely the mechanism by which a platform adds approval gates to the critical path. Good delivery architecture does the reverse: it removes decisions from the critical path by making the safe choice the default one.

A mandate is an admission that the architecture is not good enough to win adoption on its merits. People accept what helps them and route around what is imposed on them; the platform that has to be made compulsory has already failed the only test that matters.

That dynamic, acceptance freely given versus compliance extracted, is the same one we trace in The Acceptance Gap, now visible a layer up. Engineers accept tooling that demonstrably reduces their cognitive load and reject tooling that does not, whatever the mandate says. It is the identical pattern emerging around AI tooling today, and the lesson transfers without modification: imposition does not produce acceptance, it produces the appearance of acceptance and a quiet search for the exit.

Cognitive load is the mechanism, not the slogan

The reason developer experience is the right lens is that cognitive load reduction is the actual mechanism by which a platform creates value. DORA's 2024 findings are clear that user-centric platform teams produce engineers who are more productive, more satisfied and less prone to burnout, and that the gains should be read across the DevEx and SPACE dimensions rather than through any single output figure. A platform that lowers the number of decisions an engineer must hold in their head to ship safely is creating value. A platform that adds decisions, even well-intentioned governance ones, is destroying it, however complete its capability matrix looks on the producer's dashboard.

Which constraints earn the right to be mandatory

None of this argues for an absence of constraint. It argues for deciding which constraints are worth the adoption cost. Bezos's distinction between one-way and two-way doors is the useful heuristic here, applied to platform decisions rather than business ones. A small set of constraints are genuinely one-way: safety, regulatory compliance, security boundaries, the things that are irreversible or catastrophic to get wrong. Those earn the right to be mandatory and embedded by default. The far larger set, ergonomic conventions, preferred languages, blessed deployment shapes, are two-way doors. They should be defaults that are pleasant enough to choose, not walls that must be obeyed. Most golden cages are built by making two-way-door decisions mandatory, spending the organisation's scarce adoption capital on ergonomics that should have been won on merit.

This is where a thinnest-viable-platform discipline belongs, applied to decisions rather than only to features. Ask of every constraint the platform imposes: does this remove a decision from the engineer's critical path, or does it merely move that decision into the platform team's approval queue? The first builds the paved road. The second builds the cage. The honest chain runs from business strategy, to the platform decisions that encode it, to voluntary adoption, to the delivery outcomes that follow, and a platform team that cannot trace that chain is optimising a metric disconnected from the value it was funded to create.

If you are deciding which platform constraints are worth their adoption cost, the reversibility lens in The Architecture Decisions That Determine Product Success is the practical companion to this piece. And if your platform is technically capable but still unloved, the deeper diagnosis is usually the one in Why Most Architecture Functions Fail to Create Business Value: an architecture optimised for something other than the organisation's ability to change safely and deliver consistently.