On-call rotation is your real architecture document. Read it.
Architecture diagrams lie. The on-call rotation does not. The most-paged service is your most-brittle dependency, and it is rarely the one in the strategy deck.
Pattern·Brittle services hidden from architecture diagramsWhat you said matters vs what actually pages
Six months of PagerDuty data versus the architecture diagram.
Critical services (per strategy deck)
4 eng dedicated
3 eng dedicated
3 eng dedicated
2 eng dedicated
2 eng dedicated
Most-paged services (real)
Not on the architecture diagram
Not on the architecture diagram
Not on the architecture diagram
The diagram is what you meant. The pages are what you built.
I joined an engagement last year where the platform team was 90% staffed against the three services on the architecture diagram labelled critical. Six months of PagerDuty data showed that none of the top five most-paged services were on that diagram. The team was spending engineering time on the wrong systems.
Whoever gets paged most owns the most brittle thing. That is rarely the system in the strategy deck. Your on-call data is the only architecture document that updates itself.
Architecture diagrams document the system someone wanted to build. On-call data documents the system that actually exists, including all the load-bearing accidents that nobody planned. The two are never the same. The gap between them is where reliability is being lost.
Here is the exercise I run on every new engagement. Pull six months of on-call alerts. Group them by service. Sort by alert volume and by time-to-acknowledge.
- Top 3 by volume: these are the systems eating your reliability budget. They are usually not on the strategy roadmap.
- Top 3 by acknowledgement delay: these are the systems nobody understands well enough to triage quickly. The original engineer left.
- Bottom of the list: services that page often but quickly. These are well-instrumented systems with the wrong alerting thresholds. Easy fix.
- Missing entirely: services that should be paging but are not. The silence is not health. It is missing instrumentation.
Once you have that list, the architecture decisions get easier. The most-paged service is the next thing to refactor, not whatever was next on the strategy roadmap. The longest-acknowledgement service is the next thing to write a runbook for. The silent services need observability before they need anything else.
I have done this exercise on every engagement of the last two years. The platform team is usually surprised by the top three. The leadership team is usually surprised by what the platform team has been working on instead.
If you are not regularly comparing your on-call data against your architecture diagrams, you are designing your platform with stale information. The diagram is what you meant. The pages are what you built.
Get the next one in your inbox
One short, opinionated field note per fortnight on platform engineering, cloud, and making AI work in production. No spam. Unsubscribe anytime.
