Sunday, 22 March 2026

Platform Engineering Fails When the Platform Has No Product Strategy

Platform engineering is frequently launched as a technical programme: standardise pipelines, create templates, consolidate cloud tooling and reduce duplication. Those aims are sensible, but they are not a product strategy. Without one, the platform becomes a collection of infrastructure chosen by its builders rather than a service shaped around its users.

The result is familiar. The platform team reports successful delivery while application teams continue to maintain custom deployment paths, copy old repositories and request exceptions. Adoption stalls because the organisation built capabilities without addressing the work developers were trying to complete.

Developers are customers, but not always the buyer

A platform serves several groups. Developers need fast, understandable paths to production. Security needs enforceable controls. Operations needs observability and recoverability. Finance needs cost visibility. Engineering leadership needs consistency without centralising every decision.

These needs can conflict. A successful platform makes the trade-offs explicit and prioritises outcomes rather than attempting to satisfy every request. "One deployment system" is an output. "A new service can reach production safely within one day" is a product outcome.

Start with journeys, not components

Map the repeated tasks that consume engineering time: creating a service, obtaining credentials, deploying to an environment, diagnosing a failed release, rotating a secret or responding to an incident. Measure delay, failure points and hand-offs in those journeys.

This prevents the roadmap from being dominated by whichever technology is most interesting to the platform team. A polished developer portal provides limited value if obtaining a database still requires four tickets and an undocumented conversation.

Define the contract

Application teams need to know what the platform provides, what they remain responsible for and what reliability they can expect. Publish supported service types, security guarantees, maintenance expectations, upgrade policies and escalation routes.

The contract must include constraints. A paved road should be opinionated enough to reduce cognitive load. If every service can override every default, the platform team inherits complexity without gaining consistency. Exceptions should be possible, but their owner and operational consequences must be visible.

Treat adoption as a design signal

Mandates can produce nominal adoption while teams work around the platform. Measure actual usage and behaviour: time to first deployment, failed-deployment recovery, support requests, abandonment rates and the proportion of services that remain on the paved road after six months.

Interview teams that do not adopt. Their reasons may reveal missing capability, poor documentation, migration cost or a legitimate workload that the platform should not support. Not every exception proves platform failure, but unexplained exceptions are valuable evidence.

Fund migration, not only construction

A platform does not create value when it is available. It creates value when workloads move onto it and old paths are retired. Migration requires capacity from both platform and application teams, along with sequencing, compatibility support and clear incentives.

Leadership should include adoption work in portfolio planning. Asking teams to migrate "when they have time" ensures that immediate product work wins while duplicated infrastructure remains indefinitely.

Run the platform as a long-lived product

Give the platform a named product owner, measurable user outcomes and a roadmap based on organisational demand. Maintain service levels, publish changes and create feedback channels. Sunset features that do not earn adoption.

The strategic value of platform engineering is not centralised tooling. It is reducing the effort required to make safe changes across the organisation. That outcome emerges when platform teams combine technical excellence with product discipline, and when leaders treat developer experience as an operating capability rather than an internal convenience.

PHP2Shell Is a Test of Whether Your Runtime Estate Is Actually Governed

On 21 October, the PHP project released emergency updates for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619. Both are ...