A technically correct system that nobody can safely change is not finished.
01 — Observe
Start with evidence: current architecture, repositories, incidents, runbooks, deployment paths, operator habits, dependencies and known pain. What exists matters more than what the diagram claims exists.
02 — Model
Make the important relationships explicit. What depends on what? Where does trust cross a boundary? Who owns failure? Which parts can be unavailable? What has to survive isolation? What must be auditable?
03 — Reduce
Complexity has a carrying cost. Remove duplicate mechanisms, accidental coupling and layers that do not earn their operational burden. The best automation is often the process you no longer need.
04 — Build
Choose technology after constraints are known. Prefer components with obvious failure behavior, strong operational affordances and a lifecycle the owning team can support.
05 — Verify
Test the system's real guarantees. Recovery, policy, upgrade behavior, identity, backup paths and failure handling should be exercised where practical. A control that cannot be checked is mostly a statement of intent.
06 — Operate
Expose telemetry, ownership, configuration and decision context. The system should remain understandable when the person who designed it is no longer in the room.
The loop
Operation creates new evidence. That evidence feeds the next change. The method therefore loops: observe → model → reduce → build → verify → operate → observe.