Be Software Architecture Wise
Be Wise Apps

Leer en español · Lire en français · Auf Deutsch lesen

Section 11.7 of 11.8 · Advanced · 24 min read

Leadership, influence and decision-making

Video lesson

5 min · narrated, with captions
Listen only (audio)
Read the transcript

A sound design that nobody adopts has the same effect as no design at all. In this lesson you'll learn how architects lead and influence decisions without formal authority.

Think of a mountain guide leading a group of experienced climbers. She can't order anyone up the mountain. People follow her because she knows the route, explains the risks honestly, listens when someone spots danger, admits when she's unsure, and has been right before. When the group disagrees about the route, she makes sure everyone is heard, agrees how the choice will be made, then helps everyone commit to it. Most architects are in the same position.

Most architects don't manage the people who build what they design. They carry responsibility without formal authority, so they lead through influence. In 1959, John French and Bertram Raven described power that comes with a position: authority, and the ability to reward or punish. Architects rarely have much of it, and a decision imposed by rank is complied with, not owned. Lasting influence rests on power that belongs to a person: expertise, information and relationships. In The Trusted Advisor, trust grows with credibility, reliability and intimacy, meaning people feel safe raising difficult things with you. And it shrinks with self-orientation: the sense that you're serving yourself, such as needing to win every argument. Be right about small things first, follow through, and say what you don't know.

Many architecture arguments are really about process: who decides, who must be asked, and how disagreement will be settled. Settle those first, and much of the heat goes. Two methods are often confused. Consensus seeks a proposal everyone actively supports. It builds strong commitment, but it's slow, and gives any one person an effective veto. Consent adopts a proposal unless someone raises a reasoned objection. The question becomes: can anyone not live with this, and why? Good enough for now, safe enough to try. When agreement can't be reached, someone must decide. Disagree and commit asks people to argue fully before the decision and support it fully afterwards, with their dissent recorded.

Gregor Hohpe's architect elevator gives a memorable picture. Large organisations are like tall buildings. In the penthouse, executives set strategy and budgets. In the engine room, engineers build and run the systems. In between sit many floors of management, where information gets filtered and distorted on the way. The architect rides the elevator between them, carrying risks, constraints, costs and options up, and strategy, priorities and the reasons why down. An architect who never leaves the penthouse becomes an ivory tower. One who never leaves the engine room becomes an unheard expert. The value comes from connecting the floors.

Now a contested decision. The platform team wants every service on a company-wide Kafka cluster, and payments objects strongly. The facilitator reframes the question around the real problem: publishing order events, so other services no longer sit in the order path. Before any meeting, the facilitator talks to each party alone. Payments must keep card data out of new systems, and can't take on more on-call work. Finance wants run costs capped. Each is recorded as an interest, not a position. At the advisory forum, the group agrees weighted criteria before looking at any options, such as delivery guarantees and the operational burden on product teams. Then come four options, including one from the dissenters: payments contributes option D, keeping synchronous calls with retries and circuit breakers. A two-week spike tests B and C under production-like load. In a consent round, option B is proposed: Kafka for order events, run by the platform team as a service. Payments objects that it may be pulled into running the broker, so the platform team's ownership is written into its team API. The decision maker accepts B, and the decision record captures the options, scores, spike results, dissent and review triggers. Dissent changed the outcome, and was recorded, not overruled.

With executives, frame every topic in terms they already manage: revenue, cost, risk, time to market, customer experience, regulation and people. Bring options rather than a single plan, each with its cost, its risk and what it gives up, and say which you recommend and why. Be clear about the decision you need, and by when. Finally, an architect who makes every decision personally becomes a bottleneck. Mentor and coach others, sponsor them with your credibility, and delegate decisions within stated guardrails.

The full section covers negotiation, conflict modes, staff-plus career paths and group decision traps. Next, in Section eleven point eight, the last in this chapter, we look at ethics and the business case. See you there.

What you need to know

Leading without authority

Most architects do not manage the people who build what they design. Teams report to engineering managers, priorities belong to product managers, budgets to directors. Yet the architect is expected to make sure significant decisions are made well and kept true across many teams, which is the core responsibility described in Section 1.4. The gap between responsibility and formal authority is the defining condition of the job, and closing it is a matter of influence.

John French and Bertram Raven's classic study of social power (1959) distinguished bases of power that come with a position (legitimate authority, the ability to reward and the ability to punish) from those that belong to a person (expertise and referent power, the respect and identification others feel); Raven later added informational power, the ability to bring facts that change minds. Architects rarely hold much positional power, and when they do, using it is costly: a decision imposed by rank is complied with, not owned, and the people who disagreed stop telling you about problems. Durable architectural influence rests almost entirely on expertise, information and relationships.

This is not a soft skill bolted on to technical work. A sound design that nobody adopts has the same effect as no design at all, and a mediocre design that teams understand and support often outperforms a brilliant one they work around. The rest of this section treats influence as a set of practices that can be learned: building trust, facilitating decisions, handling conflict, communicating upwards, growing other people and avoiding the traps that groups fall into.

Building trust and credibility

David Maister, Charles Green and Robert Galford's The Trusted Advisor (2000) offers a useful model. Trust grows with credibility (you know what you are talking about), reliability (you do what you say), and intimacy (people feel safe raising difficult things with you), and it shrinks with self-orientation (the sense that you are serving your own interests, such as being right, looking clever or protecting your design). The model's insight for architects is that self-orientation sits below the line: it divides everything else. An architect who is brilliant and dependable but visibly needs to win every argument is not trusted.

In practice, credibility is built in small, visible ways. Be right about small things before asking to be trusted on big ones. Stay close enough to the code to understand its real cost: write the spike, review the pull request, sit in on an incident review. Say what you do not know and how you would find out. Follow through on every commitment, especially the dull ones. Give credit publicly and take responsibility for your own mistakes, also publicly. Explain the reasoning behind every principle so that people can apply it in situations you did not foresee.

Trust also depends on the climate around you. Amy Edmondson's research on psychological safety, beginning with a 1999 study of work teams, found that teams in which members believe it is safe to admit mistakes and challenge others learn more and perform better. Architects shape that climate more than they realise. Reacting to bad news with curiosity rather than blame, inviting objections explicitly (what would make this fail?) and thanking people who raise them are what make it possible to hear about a flawed design while it is still cheap to fix.

Facilitating decisions

Many architecture arguments are really arguments about process: who gets to decide, who must be asked and how disagreement will be settled. Settling decision rights before discussing the substance removes much of the heat. Section 11.4 described the advice process, in which anyone may make a decision provided they seek advice from those affected and those with expertise; other organisations use an architecture review forum, a named decision owner per domain, or role charts such as RACI. The specific mechanism matters less than its being known in advance.

Within whatever decision rights apply, the architect is often the facilitator: the person who frames the question, makes sure the right people and evidence are present and steers the group to a decision that sticks. Different decision methods suit different situations, and choosing the method deliberately is part of the job.

Two methods are often confused. Consensus seeks a proposal that everyone actively supports; it builds strong commitment but is slow and gives any one person an effective veto. Consent decision-making, developed in Gerard Endenburg's sociocracy in the Netherlands from the 1970s, adopts a proposal unless someone raises a reasoned objection that it would cause harm or move the group backwards. The question changes from do you all agree? to can anyone not live with this, and why? A phrase from sociocratic practice captures the threshold well: good enough for now, safe enough to try. Consent works particularly well for two-way-door decisions, which can be revisited as evidence arrives. The IETF's rough consensus, described in Section 4.8, is a close relative.

When agreement cannot be reached, someone must decide, and it should already be clear who. Disagree and commit, also discussed in Section 4.8, asks people to argue their case fully before the decision and to support it fully afterwards. It works only if the disagreement was genuinely heard, the dissent is recorded (in the architecture decision record, with its reasons) and there is an agreed signal that would reopen the question.

Choosing a decision method

MethodHow it worksUse whenMain risk
Decide aloneThe accountable person decides, perhaps after a quick checkTwo-way doors, emergencies, decisions of narrow scopeMissed knowledge; low commitment from others
Consult, then decide (advice process)The decider must seek advice from affected people and experts, then decides and records whyMost architecture decisions in autonomous teamsAdvice sought for form's sake and ignored
ConsentAdopt unless a reasoned, paramount objection remains; objections improve the proposalDecisions that affect a group and can be revisitedObjections misused as vetoes on preference
ConsensusContinue until everyone supports the proposalSmall groups, high-stakes values or principles that need deep commitmentSlow; stalemate; decisions made by default
VoteMajority or weighted vote among participantsChoosing among options that are all acceptableA losing minority with no commitment; popularity over evidence
DelegateHand the decision, with constraints, to a team or person closer to the workThe decision is local and the constraints can be statedDelegating without the context or the constraints

Conflict and organisational politics

Organisational politics is simply how groups with different interests, limited resources and their own careers reach decisions. It is not a corruption of architecture work but its environment. Ignoring it does not make an architect principled, only less effective. The tools from earlier chapters apply directly: the stakeholder map and power/interest grid from Section 1.5 show who is affected and who can block, and the trade-off records from Section 1.6 make positions visible.

Roger Fisher and William Ury's Getting to Yes (1981) remains the most useful guide to principled negotiation, and its four ideas translate directly. Separate the people from the problem: the payments lead is not obstructive, she is worried about card data. Focus on interests, not positions: we must not use Kafka is a position, we cannot take on more on-call load is an interest that several designs could meet. Invent options for mutual gain before deciding. Insist on objective criteria, agreed before options are compared. Their idea of the best alternative to a negotiated agreement (BATNA) is useful too: knowing what happens if no agreement is reached tells everyone how much the agreement is worth.

Kenneth Thomas and Ralph Kilmann's conflict-mode model (1974) describes five ways of responding to conflict, according to how much weight you give to your own concerns and to the other party's. None is always right; the skill is choosing deliberately rather than falling back on habit.

Some practical habits help in every case. Never surprise a stakeholder in a public meeting with a proposal that affects them; talk to them first, one to one (Japanese organisations call this preparatory consultation nemawashi). When escalation is needed, escalate together: both parties present the disagreement and the options to the person who can decide, rather than each lobbying separately. And keep disagreements about designs separate from judgements about people, in what you say and in what you write.

Five conflict modes (after Thomas and Kilmann)

ModeWhat it meansUseful whenOverused, it leads to
CompetingPursue your own position firmlySafety, security or legal issues where you must hold the lineCompliance without commitment; people stop raising problems
CollaboratingWork together to meet both sides' interests fullyImportant decisions where both sides' concerns are legitimateSlow decisions on matters that did not need them
CompromisingEach side gives up part of what it wantsTime is short and both sides have equal powerDesigns that satisfy nobody and are incoherent
AvoidingPostpone or sidestep the issueThe issue is trivial or emotions need time to coolProblems that grow until they are crises
AccommodatingYield to the other side's positionYou were wrong, or the issue matters far more to themLost credibility and abandoned principles

Communicating with executives

Section 4.8 covered tailoring a message to its audience and leading with the answer. Executives deserve a little more attention, because they hold the budgets and the authority that architecture work depends on, and because architects most often lose them by explaining too much and asking too little.

Frame every topic in the terms executives already manage: revenue, cost, risk, time to market, customer experience, regulation and people. Bring options rather than a single plan, each with its cost, its risk and what it gives up, and say which you recommend and why. Quantify where you honestly can, and say how confident the numbers are; a range with a stated basis is more credible than false precision. Be explicit about the decision or support you need from them and by when. Prepare for the question what would you do if this were your money? And never let an executive learn of a serious risk first from someone else.

Senior people are often less interested in how a system works than in whether its owners are in control of it. Showing that risks are known, owned, measured and being reduced (for example through an architecture risk register or the fitness functions of Section 11.3) builds more confidence than any diagram. Section 11.8 shows how to put architecture work into the form executives use to compare investments: the business case.

The architect elevator

Gregor Hohpe's The Software Architect Elevator (O'Reilly, 2020) gives the most memorable picture of this work. Large organisations are like tall buildings. In the penthouse, executives set strategy and budgets; in the engine room, engineers build and run the systems; many floors of management sit in between, and information passing through them is filtered and distorted on the way. Hohpe's architect elevator rides between the penthouse and the engine room, carrying information in both directions: taking strategy and its reasons down to the people building systems, and taking technical realities (constraints, risks, costs and options the business did not know it had) up to the people making strategic decisions.

Hohpe's point is that the architect's value lies in connecting the floors. An architect who stays in the penthouse becomes an ivory-tower strategist whose plans ignore what is technically possible; one who stays in the engine room becomes a respected expert whose warnings never reach the people who could act on them. Riding the elevator well means changing language and level of detail at each floor without changing the substance, which is exactly the audience skill of Section 4.8 applied to a whole organisation.

Riding the elevator

Gregor Hohpe's architect elevator: an architect rides between the penthouse and the engine room, carrying information in both directionsPenthouseboard and executives: strategy, budgetManagement floorsportfolios, programmes, organisationProduct and architectureroadmaps, cross-team designEngine roomcode, infrastructure, operationsCarry up:risks, constraints,costs, optionsCarry down:strategy, priorities,the reasons whyNever leaves thepenthouse:ivory towerNever leaves theengine room:unheard expertThe architect's value comes from connecting the floors
After Gregor Hohpe: the architect connects strategy in the penthouse with technical reality in the engine room, translating in both directions.

Growing other architects

An architect who makes every significant decision personally becomes a bottleneck, and the organisation's architectural capability leaves with them. Growing others is therefore part of the role, not an optional extra. It helps to distinguish three activities. Mentoring shares your experience and advice. Coaching asks questions that help someone reach their own answer, which builds judgement faster. Sponsoring uses your credibility to give someone opportunities: recommending them to lead a design, putting their name on the proposal, inviting them to the executive meeting.

Practical techniques include pairing on designs and reviews, letting less experienced engineers write the ADR for a decision and reviewing it with them, running architecture katas (Section 11.2) as practice, delegating decisions within stated guardrails, and narrating your reasoning aloud during design discussions so that others can see how trade-offs are weighed rather than only the conclusion.

Many organisations now offer a technical career path parallel to management. Will Larson's Staff Engineer: Leadership beyond the management track (2021) popularised the term staff-plus for staff, principal and more senior individual contributors, and described four common archetypes from interviews with people in those roles. Tanya Reilly's The Staff Engineer's Path (O'Reilly, 2022) organises the work around big-picture thinking, executing large projects and levelling up the engineers around you. In her 2019 talk "Being Glue", Reilly also drew attention to the coordinating work (unblocking people, writing the missing document, noticing the gap between teams) that keeps projects alive but is often not rewarded in promotion; architects should notice who does it and make sure it counts.

Staff-plus archetypes (after Will Larson)

ArchetypeFocusTypical architectural contribution
Tech leadGuides the approach and execution of one team, in partnership with its managerOwns the team's architecture decisions and keeps them aligned with the wider system
ArchitectResponsible for the direction, quality and approach of a critical areaSets principles, reviews designs and stewards key qualities across several teams
SolverDigs into hard, ambiguous problems and finds a way forward, often moving between themResolves the stuck migration, the performance crisis or the unclear boundary
Right handExtends an executive's attention, borrowing their scope and authorityDrives organisation-wide technical initiatives and connects strategy with execution

Decision traps revisited

Section 1.6 listed the individual biases that distort architectural decisions: anchoring, sunk cost, groupthink, résumé-driven development, hype and confirmation bias. Leading decisions among groups adds traps of its own, which come from status, fatigue and organisational momentum rather than from individual reasoning.

Group and organisational traps

TrapWhat it looks likeCountermeasure
Deference to the highest-paid opinionThe most senior person speaks first and the discussion converges on their viewAsk the most senior person to speak last; collect written views before the meeting
Escalation of commitmentA failing initiative receives more investment because so much has already been committed to it (Barry Staw, 1976)Set kill criteria and review dates at the start; review with people who were not involved
BikesheddingLong debate about trivial, easily understood details while the hard decision gets minutes (Parkinson's law of triviality, 1957)Timebox by significance; push two-way-door details to the team that owns them
Decision by attritionThe option backed by whoever has most stamina wins once everyone else is tiredAgree the decision method, the decider and the deadline in advance
False consensusSilence is taken as agreement; objections surface after the decisionAsk explicitly for objections, by name if necessary, and record them
Not invented hereExternal solutions are rejected because they were not built internallyCompare build and buy against the same criteria, including the cost of running what you build
Analysis paralysisMore information is always requested; nothing is decided by the last responsible momentName the decision date and what evidence would be enough; make reversible decisions quickly

Worked example

Worked example: navigating a contested decision about an event bus

This example goes back to the decision that introduced the food-delivery platform's event broker, before the architecture evaluated in Section 11.1 existed. The platform team proposes that all services communicate through a company-wide managed Kafka cluster. The ordering team is enthusiastic, the payments team objects strongly, finance is worried about cost, and the CTO wants a decision within a month. Under the company's advice process the platform team's lead architect is the decision maker. A principal architect is asked to facilitate.

1. Reframe the questionKafka for everything? is a position. The underlying problem, from two Friday outages, is that order placement depends on synchronous calls to notifications and dispatch. The question becomes: how should services publish business events, starting with order events, so that consumers no longer sit in the order path? Scope and decision rights are written at the top of a draft ADR.
2. Listen one to one firstBefore any meeting, the facilitator talks to each party. Payments: card data must stay out of new systems, and the team cannot take on more on-call work after a painful incident with a self-hosted broker. Ordering: needs decoupling for peaks. Finance: wants run costs capped. Security: needs encryption and access control per topic. The platform team: wants one supported standard rather than five. Each is recorded as an interest, not a position.
3. Agree criteria before optionsAt the architecture advisory forum the group agrees weighted criteria: delivery guarantees and per-order ordering (5), operational burden on product teams (5), compliance scope (4), run cost at three times today's volume (3), skills (3) and reversibility (3).
4. Generate options, including the dissenters'A: managed Kafka, mandatory for all services. B: managed Kafka for order-domain events through a transactional outbox, other teams opt in later. C: the cloud provider's simpler publish-subscribe and queue services. D: keep synchronous calls and add retries and circuit breakers. Payments contributes option D and the cost analysis for C.
5. Gather evidenceA two-week spike runs B and C with production-like load: end-to-end latency, behaviour during broker failover and estimated monthly cost. Security confirms that order events can be designed to contain no card data, which keeps them out of payment-card scope.
6. Consent roundProposal: B, with the platform team operating the cluster as X-as-a-Service. Payments objects that it may still be pulled into broker operations; the objection is resolved by writing the platform team's ownership and support hours into its team API. Finance's concern becomes a cost alert and a review threshold. One ordering engineer still prefers C; she can live with B, and her reasoning is recorded.
7. Decide, record and communicateThe decision maker accepts B. The ADR records options, scores, the spike results, the dissent and the review triggers (more than three teams adopting, or costs above the agreed threshold, or six months, whichever comes first). The CTO and CFO receive a one-page summary of benefit, cost and risk; teams get a walkthrough; the technology radar entry is updated to Trial.
8. Follow throughA schema-compatibility check runs in every producer's pipeline, the outage scenario is re-tested, and at the six-month review the evidence is used to decide whether to widen, keep or reverse the decision.

The facilitator never argued for an option; the work went into framing, interests, criteria, evidence and a clear decision method.

Dissent changed the outcome (scope narrowed, platform ownership made explicit) and was recorded rather than overruled silently.

The decision was made reversible in practice through limited scope and agreed review triggers.

Check your understanding

Why talk to stakeholders one to one before a decision meeting?

To understand their interests privately, avoid surprising them in public and surface objections early, when they can still shape the proposal.

How do mentoring, coaching and sponsoring differ?

Mentoring shares your experience and advice, coaching asks questions that help someone reach their own answer, and sponsoring uses your credibility to create opportunities for them.

What does an architect lose by never leaving the engine room?

The ability to influence strategy: their knowledge of risks, constraints and options never reaches the people making investment and organisational decisions.

Why should dissent be recorded in the decision record?

So that the reasoning is preserved, the dissenters know they were heard and, if their concerns come true, the organisation knows what to revisit and why.

Next · 11.8Ethics and businessHow to argue for architecture work in money, time and risk, with net present value and payback worked through; and how professional ethics, foreseeable harms and green software practice shape responsible design.Continue →

Sources and further reading

Have a question about this section? ArchitectBot, the course’s AI study assistant, answers from the course first.

Ask: “Two senior engineers on my team are deadlocked over adopting an event bus and both are partly right. How do I facilitate a decision that both of them will actually support?”