Skip to content

CONCEPT Cited by 1 source

Design-to-code traceability

Definition

Design-to-code traceability is the architectural property of maintaining a visible, verifiable link between decisions made during design review (threat models, API contracts, privacy requirements, compliance constraints) and the implementing code. Without this property, reviewers at code-review time cannot verify that agreed-upon requirements were actually implemented.

Why it matters

The gap between design decisions and implementation is structural, not incidental:

Approaches to closing the gap

Approach Limitation
Manual linking (engineers add references) Compliance declines over time; depends on memory
Bot reminders Adds noise; doesn't verify content alignment
Static analysis Detects presence of controls, not alignment with intent
Semantic retrieval + LLM reasoning Can recover invisible connections and compare implementation against requirements automatically

The Dropbox realization

Dropbox's system uses Dash's MCP server to semantically retrieve relevant threat models during code review, then uses a foundational LLM to reason across both the requirement document and the code change to identify gaps. This achieved 80% linkage rate (vs 12% through explicit references alone).

Generalization

The concept applies beyond security to any domain where documented requirements must be verified against implementation: - Privacy: data classification requirements vs code handling user data - Platform: API contracts vs interface changes - Compliance: regulatory requirements vs data handling in regulated jurisdictions

Seen in

Last updated · 542 distilled / 1,571 read