Architecting with AI
Software Architecture doesn't change, but the software that's architected does
August 01, 2024

Mike Loukides
O'Reilly Media

Software architecture is a complex process. It involves talking to stakeholders to determine what's needed; talking to developer teams to determine their capabilities; and much more. Finances come into play: what will it cost to build and operate the software product? What kind of return on investment is expected; and is the product likely to achieve that?

Politics comes into play: who at the company is really calling the shots, who is really making the technical decisions?

Users come into play: what do they really need and what problems are they really facing?

What a company wants might not be what it needs, and it usually falls to the architect to uncover these hidden needs and get them into the project plans. Much of this happens before writing a single line of code or architectural diagram, and it continues throughout the project's lifecycle.

So to discuss the role of AI in software architecture, we have to think about the whole process, not just code generation or creating documentation like architectural diagrams. We all know that AI has gotten quite good at generating code. There are people experimenting with using AI to UML and C4 diagrams. AI will definitely play a role here. But I don't expect AI to have much of an impact on the rest of the process, which involves understanding and negotiating all of those human issues.

Why? Think about what these tasks really require. A human can walk into a meeting and size up the politics fairly quickly. Who is running things, who is getting their ego stroked while the people who really control the agenda head in a different direction, whose opinions count, whose opinions don't. AI has yet to prove itself good at extracting nuance from a conversation. AI can make a meeting transcript, but it can't understand priorities and determine which is really important, particularly when the real priorities may involve agendas that nobody mentions explicitly. It can help to craft an application given a statement of design goals, but it can't infer those goals, particularly when some of the requirements are unstated (or even unknown).

Once you've got a start on the information gathering, you have to start designing — and that isn't just UML and C4. Designing is all about tradeoffs. We like to think it's about coming up with the best solution, but I've become fond of quoting Neal Ford: it's all about the least worst solution. That's reality.

What can we afford to build?

How much will it cost to run this in the cloud versus on premises?

Can we deliver good performance for the loads we expect with a budget we can afford?

How do we deal with the political struggle between cloud and on-premises advocates?

These questions don't have unambiguous answers; they all involve tradeoffs, and I've yet to see evidence that AIs are good at making tradeoffs.

I'll take that a step further. I don't know how you would acquire the data needed to train an AI to make those tradeoffs. Every project is different, and understanding the differences between projects is all about context. Do we have documentation of thousands of corporate IT projects that we would need to train an AI to understand context? Some of that documentation probably exists, but it's almost all proprietary. Even that's optimistic; a lot of the documentation we would need was never captured and may never have been expressed.

Another issue in software design is breaking larger tasks up into smaller components. That may be the biggest theme of the history of software design. AI is already useful for refactoring source code. But the issues change when we consider AI as a component of a software system. The code used to implement AI is usually surprisingly small — that's not an issue. However, take a step back and ask why we want software to be composed of small, modular components. Small isn't "good" in and of itself. Small components are desirable because they're easier to understand and debug. Small components reduce risk: it's easier to understand an individual class or microservice than a multi-million line monolith.

There's a well-known paper(link is external) that shows a small box, representing a model. The box is surrounded by many other boxes that represent other software components: data pipelines, storage, user interfaces, you name it. If you just count lines of code, the model will be one of the smallest components. But let's change the perspective by stepping back: what if the box size represented risk? Now that tiny box representing the model suddenly grows much larger. AI models are black boxes, and always unpredictable. If we really want to minimize risk rather than just lines of code, AI is problematic. That risk doesn't mean AI should be avoided, but it does add complications: applications need to incorporate guardrails to prevent the AI from behaving inappropriately, developers need to run evaluations that test whether the system as a whole is achieving its aims — and software architects will play a big role to design these additional components. They will have a crucial role in determining what the risks are and how to address them.

We're already seeing tools for generating transcripts and summaries of meetings, and those are undoubtedly useful. But it will be a while before we have tools that can understand the context for a software project, process all the issues that are raised by a software project, and make the tradeoffs that are at the heart of engineering. Software development isn't just about grinding out code. It's about understanding context and solving problems that make sense within that context.

Mike Loukides is VP of Emerging Tech at O'Reilly Media
Share this

Industry News

April 10, 2025

Check Point® Software Technologies Ltd.(link is external) announced that its Infinity Platform has been named the top-ranked AI-powered cyber security platform in the 2025 Miercom Assessment.

April 10, 2025

Orca Security announced the Orca Bitbucket App, a cloud-native seamless integration for scanning Bitbucket Repositories.

April 10, 2025

The Live API for Gemini models is now in Preview, enabling developers to start building and testing more robust, scalable applications with significantly higher rate limits.

April 09, 2025

Backslash Security(link is external) announced significant adoption of the Backslash App Graph, the industry’s first dynamic digital twin for application code.

April 09, 2025

SmartBear launched API Hub for Test, a new capability within the company’s API Hub, powered by Swagger.

April 09, 2025

Akamai Technologies introduced App & API Protector Hybrid.

April 09, 2025

Veracode has been granted a United States patent for its generative artificial intelligence security tool, Veracode Fix.

April 09, 2025

Zesty announced that its automated Kubernetes optimization platform, Kompass, now includes full pod scaling capabilities, with the addition of Vertical Pod Autoscaler (VPA) alongside the existing Horizontal Pod Autoscaler (HPA).

April 08, 2025

Check Point® Software Technologies Ltd.(link is external) has emerged as a leading player in Attack Surface Management (ASM) with its acquisition of Cyberint, as highlighted in the recent GigaOm Radar report.

April 08, 2025

GitHub announced the general availability of security campaigns with Copilot Autofix to help security and developer teams rapidly reduce security debt across their entire codebase.

April 08, 2025

DX and Spotify announced a partnership to help engineering organizations achieve higher returns on investment and business impact from their Spotify Portal for Backstage implementation.

April 07, 2025

Appfire announced its launch of the Appfire Cloud Advantage Alliance.

April 07, 2025

Salt Security announced API integrations with the CrowdStrike Falcon® platform to enhance and accelerate API discovery, posture governance and threat protection.

April 07, 2025

Lucid Software has acquired airfocus, an AI-powered product management and roadmapping platform designed to help teams prioritize and build the right products faster.

April 03, 2025

StackGen has partnered with Google Cloud Platform (GCP) to bring its platform to the Google Cloud Marketplace.