Four Shifts: Code, Boundaries, Machine Speed and the AI Team · The Transformed Security Architect: the course

All courses / The Transformed Security Architect / Module 1 / Chapter 3

Learning objectives

After the lesson the participant can:

Define each of the four shifts by what it changes: the medium, authority, tempo and authorship of the architect's work.
Distinguish which claims about each shift the chapter labels observable, expected or speculation.
Explain how the shifts depend on one another and name the failure mode of each.
Assess a security architecture practice on the four-stage scale with evidence links and dependency flags.

Key concepts

Boundary: A place where a rule is enforced by something other than the party it governs, with a named owner and a test. It is the central product of Shift 2, from gatekeeper to boundary designer.
Dependencies between the shifts: Code enables boundaries, boundaries enable speed, speed requires the AI team, and the AI team requires verification, which requires code. The natural order is Shift 1, then 2, then 3, with Shift 4 never ahead of its containment.
Four failure modes: Code without judgement, boundaries without owners, speed without reversibility and an AI team that approves itself. Each looks like success from inside and removes the human judgement the shift was meant to concentrate.
Four-stage scale: Stage 0 inherited, stage 1 starting with at least one artefact or decision in the new form, stage 2 established as the default in scope, and stage 3 verified, meaning tested, measured and reported.
Dependency check: A flag raised when Shift 4 is rated above Shift 2, because the AI team's autonomy then outruns its containment, or Shift 3 above Shift 1, because continuous measurement of what is not code usually rests on attestation.

Interactive exercises

Do them here and get feedback at once. Choose a card and then where it belongs, or drag it.

Interactive exercise 1 · Sort

Artefacts and failure modes by shift

Sort each item under its shift: Shift 1, from documents to code; Shift 2, from gatekeeper to boundary designer; Shift 3, from periodic to continuous, at machine speed; Shift 4, from sole author to conductor of an AI team.

Interactive exercise 2 · Scenario

Rating a shift without fresh evidence

Apply the evidence rule of the chapter's guide for locating a practice on the four shifts.

Teaching plan

20 min	Lecture on Table 3.1: for each shift the teacher gives the definition, the recognition test, the evidence and its label, and what does not change.
10 min	Participants explain in pairs why a nightly pipeline is Shift 2 without Shift 3, and why an on-call architect who approves within minutes is Shift 3 without Shift 2.
10 min	Group work on the failure modes: each group takes one, describes how it would look like success from inside, and states the chapter's remedy.
30 min	Exercise: participants run the shift assessment for their own practice or for Hansa Mutual, rating on evidence only, and present their dependency flags.
5 min	Wrap-up: the teacher compares the results with AIDR-0509 and AIDR-0551 and the order of next steps each implies.

Discussion

Hansa Mutual is far along Shift 4 while still blocked on Shift 2. What risks follow from that order, and how would you explain the urgency to an executive board?
The chapter says Shift 3 has no artefact of its own because it is a property of the others. What does that mean for how you would report progress on it?
Which of the four failure modes would be hardest to notice from inside your organisation, and what measurement would reveal it?

Written exercise

Exercise · 30 minutes

Locate a practice on the four shifts

Follow the chapter's practical guide for your own security architecture practice. Sample the last 20 security architecture decisions, or all from the last quarter if fewer. For each shift, answer the indicator questions and assign a stage from 0 to 3. Rate on evidence only: a rating needs a link to an artefact, measurement or record no older than 90 days, and without one you take the lower stage. Apply the two dependency checks and state any flag. List the gaps and name the artefacts that would close each. If you have no practice to assess, reconstruct Hansa Mutual's assessment from the chapter and justify its single flag.

Deliverable: A shift assessment in the form of the chapter's example: a stage, evidence and gaps for each of the four shifts, the dependency flags and a list of next steps.

Your work

Self-test

Choose an answer to see whether it is right, or open the answer below each question.

Why does the chapter hold that 'from perimeter to zero trust' is not a fifth shift?
Show the answer
C. Because it describes content, one answer to Shift 2, and not a change in the role
More shifts would describe content instead of change in the role. The chapter gives 'from perimeter to zero trust' as one answer to Shift 2, and 'from compliance to evidence' as Shift 1 applied to assurance.
How does the chapter label the effect of Shift 4 on the quality of architecture decisions?
Show the answer
D. Not established by any study found, so claims in either direction are speculation
Shift 4 is observable in early adopters, but its effect on decision quality is not established by any study the book has found, so the chapter labels claims in either direction speculation.
In the shift assessment, what does it mean when Shift 4 is rated above Shift 2?
Show the answer
A. The AI team's autonomy outruns its containment, which raises a dependency flag
The dependency check flags Shift 4 above Shift 2 because the AI team's autonomy then outruns its containment. This is Hansa Mutual's one flag: the agent team produces proposals faster than the group has delegated decisions.