Inferensys

Prompt

Multi-Region Resilience Architecture Audit Prompt

A practical prompt playbook for using the Multi-Region Resilience Architecture Audit Prompt in production AI workflows. Designed for cloud architects reviewing cross-region failover, data replication, and disaster recovery designs.
Data scientist building training data pipeline on laptop, data preprocessing visible, technical workspace.
PROMPT PLAYBOOK

When to Use This Prompt

Defines the ideal user, required context, and boundaries for applying the Multi-Region Resilience Architecture Audit Prompt.

This prompt is for cloud architects, SREs, and platform engineers who need a structured, evidence-based audit of a multi-region architecture design before it is approved or implemented. It is not a replacement for chaos engineering or live failover testing. Use this prompt when you have a design document, architecture diagram, or configuration spec and need to identify gaps in failover triggers, consistency trade-offs, capacity planning, and DNS/routing cutover. The prompt forces the model to act as a skeptical reviewer, not a design cheerleader, and requires specific inputs about regions, data stores, and routing to produce a useful audit.

The ideal user brings a concrete design artifact—a written proposal, a Terraform plan, a cloud architecture diagram, or a configuration specification—that describes at least two regions, the data replication strategy, and the intended failover mechanism. The prompt is most effective when the design is detailed enough to be critiqued. Vague inputs produce vague audits. The model will interrogate assumptions about regional capacity, consistency models, and cutover procedures, so the input must contain enough detail for the model to find real gaps rather than inventing hypothetical ones.

Do not use this prompt for single-region deployments, pure network topology reviews, or real-time incident response. It is a design-time review tool, not an operational runbook. Avoid using it when the architecture is still in the brainstorming phase without concrete decisions about data stores, replication, or routing. The prompt assumes a multi-region design exists and needs hardening. If you need a prompt for evaluating a single region's resilience patterns, use the Circuit Breaker Design Review or Retry Policy Configuration Analysis prompts instead. For live incident diagnosis, use the Operational Incident and Runbook Prompts pillar.

PRACTICAL GUARDRAILS

Use Case Fit

Where the Multi-Region Resilience Architecture Audit Prompt delivers value and where it introduces risk.

01

Good Fit: Pre-Deployment Architecture Review

Use when: reviewing a multi-region design before production deployment. The prompt excels at auditing failover triggers, consistency trade-offs, and DNS cutover plans against documented architecture. Guardrail: require the architecture document as input; do not run the audit from memory or assumptions.

02

Bad Fit: Real-Time Incident Response

Avoid when: an active cross-region outage is in progress. The prompt produces a structured audit, not a live diagnostic or remediation playbook. Guardrail: route active incidents to runbook execution prompts or on-call engineers; use this prompt for post-incident review only.

03

Required Inputs: Architecture Documentation

What to watch: the prompt produces unreliable output when fed vague descriptions or tribal knowledge. Guardrail: require explicit inputs including region topology, replication strategy, failover triggers, DNS/routing config, and capacity plans. Reject runs with missing critical sections.

04

Operational Risk: Split-Brain Scenario Gaps

What to watch: the audit may miss subtle split-brain conditions when consistency guarantees are documented imprecisely. Guardrail: always include explicit test scenarios for partition tolerance, quorum loss, and conflicting writes. Flag any audit output that lacks these scenarios for human review.

05

Operational Risk: Capacity Assumption Errors

What to watch: the prompt may accept stated capacity numbers without questioning whether failover region capacity is actually sufficient under real load. Guardrail: cross-reference capacity claims with load test results or require explicit capacity validation evidence before accepting audit conclusions.

06

Variant: Partial Region Degradation

What to watch: standard audits often assume binary region health (up/down) and miss partial degradation scenarios. Guardrail: extend the prompt with explicit partial-failure test cases covering degraded services, slow replicas, and partial network partitions to surface incomplete failover logic.

PROMPT PLAYBOOK

Copy-Ready Prompt Template

A copy-ready prompt for auditing multi-region resilience architecture, ready to adapt with your system details.

This prompt template is designed to be pasted directly into your AI workspace. It instructs the model to act as a principal cloud architect conducting a structured audit of a multi-region deployment. The template uses square-bracket placeholders for all variable inputs, such as your architecture description, specific risk tolerances, and the desired output format. Before using it, ensure you have gathered your architecture diagrams, service dependency maps, and any existing disaster recovery documentation. This prompt is most effective when the provided context is detailed and specific; vague inputs will produce a generic, less actionable audit.

text
You are a principal cloud architect specializing in multi-region resilience for high-availability systems. Your task is to conduct a rigorous, structured audit of the provided system architecture. You must identify single points of failure, evaluate data consistency trade-offs, and assess the robustness of failover mechanisms. Your analysis must be evidence-based, referencing only the provided context.

**INPUT ARCHITECTURE:**
[ARCHITECTURE_DESCRIPTION]

**AUDIT PARAMETERS:**
- Recovery Time Objective (RTO): [RTO_IN_SECONDS]
- Recovery Point Objective (RPO): [RPO_IN_SECONDS]
- Primary Consistency Model: [CONSISTENCY_MODEL]
- Regions Involved: [REGION_LIST]
- Key User Flows: [CRITICAL_USER_FLOWS]

**OUTPUT SCHEMA:**
You must produce a JSON object conforming to the following structure. Do not include any text outside the JSON block.
{
  "audit_summary": {
    "overall_risk_level": "low|medium|high|critical",
    "primary_concerns": ["string"]
  },
  "failover_analysis": {
    "trigger_mechanism_review": "string",
    "dns_routing_cutover_assessment": "string",
    "estimated_switchover_time_seconds": number
  },
  "data_replication_audit": {
    "consistency_conflicts": ["string"],
    "split_brain_risk": "low|medium|high",
    "data_loss_scenarios": ["string"]
  },
  "capacity_assessment": {
    "target_region_sufficiency": "string",
    "bottleneck_resources": ["string"]
  },
  "test_scenarios": [
    {
      "scenario_name": "string",
      "description": "string",
      "expected_behavior": "string",
      "potential_failure_mode": "string"
    }
  ],
  "critical_recommendations": ["string"]
}

**CONSTRAINTS:**
- Base all findings strictly on the provided [ARCHITECTURE_DESCRIPTION]. Do not invent components.
- If information is missing to assess a field, explicitly state 'Insufficient data provided' as the value.
- Prioritize findings that threaten the defined RTO and RPO.
- Include at least three distinct test scenarios for split-brain conditions and partial region degradation.

To adapt this template, replace each square-bracket placeholder with your specific details. For [ARCHITECTURE_DESCRIPTION], paste a comprehensive text description of your system, including services, data stores, and their regional deployment. For [RTO_IN_SECONDS] and [RPO_IN_SECONDS], use numeric values to drive a quantitative assessment. The [CONSISTENCY_MODEL] should be a term like 'strong', 'eventual', or 'read-after-write'. After running the prompt, validate the output JSON against the defined schema. For high-risk systems, the generated audit should be reviewed by a human architect before any remediation actions are planned. Do not use this prompt for simple single-region deployments, as the output will be largely irrelevant.

IMPLEMENTATION TABLE

Prompt Variables

Each placeholder must be populated for the prompt to produce a reliable audit. Validate inputs before execution to prevent false confidence in incomplete resilience reviews.

PlaceholderPurposeExampleValidation Notes

[ARCHITECTURE_DOCUMENT]

Source material describing the multi-region topology, data replication strategy, and failover mechanisms

Architecture Decision Record for payment-service cross-region deployment, including DNS routing policy and Aurora Global Database configuration

Must be non-empty text exceeding 200 characters. Reject if document contains only diagrams without textual description of failover triggers.

[REGIONS]

List of cloud regions included in the resilience architecture under audit

us-east-1, eu-west-1, ap-southeast-2

Must contain at least 2 valid cloud region identifiers. Parse against known region list. Reject single-region inputs as not applicable for multi-region audit.

[CRITICAL_SERVICES]

Inventory of services that must survive a region failure, with their tier classification

payment-api (Tier 0), order-processor (Tier 1), notification-service (Tier 2)

Each entry must include service name and tier. Tier must be one of 0, 1, or 2. At least one Tier 0 service required.

[RPO_RTO_TARGETS]

Recovery Point Objective and Recovery Time Objective per critical service, in seconds

payment-api: RPO=0s, RTO=60s; order-processor: RPO=300s, RTO=900s

Values must be positive integers. RPO of 0 indicates synchronous replication requirement. Reject if RTO < RPO for any service.

[DATA_STORES]

Persistent stores with their replication mode and consistency guarantees

Aurora Global Database (managed, 1s lag), DynamoDB Global Table (multi-master, eventual), ElastiCache Redis (no cross-region replication)

Each store must specify replication mode. Flag stores with no cross-region replication as audit risks. Validate consistency model against RPO targets.

[ROUTING_CONFIG]

DNS, load balancer, and traffic management configuration for cross-region routing

Route53 failover routing with 30s health check interval, Global Accelerator with endpoint groups in us-east-1 and eu-west-1

Must describe routing mechanism and failover trigger. Reject if health check configuration is absent. Validate health check interval against RTO targets.

[SPLIT_BRAIN_SCENARIOS]

Known split-brain conditions and the system's intended conflict resolution strategy

DynamoDB last-writer-wins with vector clocks for order-processor state; Aurora automatic failover with forced promotion after 300s isolation

Each scenario must pair a condition with a resolution strategy. Flag any scenario where resolution is undefined or relies on manual intervention without documented procedure.

PROMPT PLAYBOOK

Implementation Harness Notes

How to wire the Multi-Region Resilience Architecture Audit Prompt into an architecture review pipeline.

This prompt is designed to operate as a gated step within a broader architecture review pipeline, not as a standalone chatbot interaction. The implementation harness must enforce structured input collection, validate the model's output against a defined schema, and route findings to the appropriate review queue. Because the prompt audits critical infrastructure decisions—failover triggers, data consistency trade-offs, and split-brain scenarios—the harness must treat the model's output as an advisory draft that requires human approval before being accepted into any architecture decision record (ADR) or runbook.

Wire the prompt by first assembling the required inputs: the architecture document or diagram description, the target regions, the data store types and their replication modes, and the routing or DNS cutover design. These map to the [ARCHITECTURE_DOC], [REGIONS], [DATA_STORES], and [ROUTING_DESIGN] placeholders. The application layer should validate that each input field is non-empty and conforms to expected formats before calling the model. After the model returns its audit, validate the output against a strict JSON schema that requires fields such as failover_triggers, consistency_gaps, capacity_risks, split_brain_scenarios, and partial_degradation_tests. Reject and retry any response that fails schema validation, up to a maximum of two retries with a backoff of 2 seconds. Log every attempt, including the raw prompt, the model response, and the validation result, to an audit trail for later review.

For high-risk deployments, integrate a human review step after successful validation. Route the structured audit to a review queue where a cloud architect or SRE can approve, reject, or amend each finding. The harness should support a feedback loop: if a reviewer amends a finding, store the amendment alongside the model's original output to improve future prompt iterations. Do not automatically apply any remediation steps based on the model's output. The prompt identifies risks; it does not execute failover reconfiguration. Avoid wiring this prompt directly into CI/CD pipelines that deploy infrastructure changes without a manual approval gate.

IMPLEMENTATION TABLE

Expected Output Contract

Defines the strict schema, types, and validation rules for the Multi-Region Resilience Architecture Audit output. Use this contract to parse, validate, and store the model response reliably.

Field or ElementType or FormatRequiredValidation Rule

audit_id

string (UUID v4)

Must match regex ^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$

target_architecture

object

Must contain 'regions' (array of strings, min 2) and 'data_stores' (array of strings, min 1). Schema validation required.

failover_triggers

array of objects

Each object must have 'condition' (string), 'detection_method' (string), 'expected_rto_seconds' (integer >= 0). Array length >= 1.

consistency_assessment

object

Must contain 'model' (enum: ['strong', 'eventual', 'read-your-writes']) and 'conflict_resolution' (string). No null values allowed.

capacity_audit

object

Must contain 'target_region_capacity_ratio' (float, 0.0-1.0) and 'hot_standby' (boolean). Ratio must be parseable as a number.

dns_routing_review

object

Must contain 'strategy' (string), 'ttl_seconds' (integer >= 30), and 'health_check_path' (string starting with '/').

split_brain_scenarios

array of objects

Each object must have 'scenario_name' (string), 'detection_possible' (boolean), and 'mitigation' (string). Array length >= 2.

partial_degradation_scenarios

array of objects

Each object must have 'region' (string), 'degraded_services' (array of strings, min 1), and 'user_impact' (string). Array length >= 1.

overall_risk_score

string

Must be one of enum: ['low', 'medium', 'high', 'critical']. Case-sensitive match required.

recommendations

array of strings

Array length >= 1. Each string must be non-empty and <= 500 characters. Retry if empty array.

evidence_citations

array of strings

If present, each string must start with 'Source:' followed by a non-empty identifier. Null allowed if no sources provided.

PRACTICAL GUARDRAILS

Common Failure Modes

What breaks first when auditing multi-region resilience architectures and how to guard against each failure mode before it reaches production.

01

Split-Brain Scenario Blindness

What to watch: The prompt produces a clean audit but fails to identify split-brain conditions where two regions simultaneously claim primary status. This happens when the model treats region states as mutually exclusive without explicit instruction to check for dual-writer conflicts, conflicting DNS records, or uncoordinated failover triggers. Guardrail: Include a dedicated split-brain detection step in the prompt template that requires the model to enumerate all possible dual-primary scenarios and verify that the design includes fencing tokens, quorum mechanisms, or external coordination locks.

02

Consistency Model Oversimplification

What to watch: The audit collapses async replication, sync replication, and eventual consistency into vague statements like 'data will be replicated' without surfacing the specific consistency guarantees, conflict resolution strategies, or data loss windows for each data store. This produces a false sense of safety. Guardrail: Require the prompt to produce a per-data-store consistency matrix with explicit fields: replication mode, RPO in seconds, RTO in seconds, conflict resolution strategy, and last-writer-wins vs. merge semantics. Add eval assertions that every data store in the architecture appears in the matrix.

03

DNS and Routing Cutover Assumptions

What to watch: The prompt assumes DNS failover is instantaneous or treats routing cutover as a solved problem without examining TTL propagation delays, client-side caching, connection draining, or stale endpoint resolution. The audit misses the user-visible impact window. Guardrail: Add a routing cutover timeline section to the output schema that forces the model to estimate: DNS propagation time, connection drain duration, client retry behavior, and the total user-visible degradation window. Validate that TTL values and health check intervals are explicitly referenced from the input configuration.

04

Capacity Planning Gap in Failover Region

What to watch: The audit validates failover procedures but ignores whether the secondary region has sufficient compute, database, and network capacity to absorb full production load. The model assumes symmetric capacity unless explicitly told to verify it. Guardrail: Include a capacity adequacy check in the prompt that requires comparison of primary and secondary region instance counts, database tier sizes, connection pool limits, and bandwidth allocations. Add a pass/fail eval that flags any audit output missing explicit capacity ratios or headroom calculations.

05

Partial Region Degradation Overlooked

What to watch: The prompt focuses on complete region failure and misses partial degradation scenarios where a single AZ, service, or data store fails within a region. The audit produces an all-or-nothing failover plan that doesn't address gray failures. Guardrail: Require the prompt to generate at least three partial degradation scenarios per region and evaluate whether the architecture degrades gracefully or triggers unnecessary full failovers. Add eval criteria that counts distinct degradation scenarios and verifies each has a documented response path.

06

Failback Procedure Omission

What to watch: The audit thoroughly covers failover but produces no failback plan, leaving operators without guidance on how to return to the primary region after recovery. This creates prolonged split-operations risk and accumulated data divergence. Guardrail: Add a mandatory failback section to the output schema that covers: data reconciliation steps, reverse replication catch-up, traffic shifting procedure, and validation gates before declaring failback complete. Validate that the failback section is non-empty and references specific data stores and replication mechanisms.

IMPLEMENTATION TABLE

Evaluation Rubric

Score the audit output against these criteria before approving it for architecture review. Each row is a gate; a single failure signal should block approval until the issue is resolved or explicitly waived.

CriterionPass StandardFailure SignalTest Method

Failover Trigger Completeness

Every declared cross-region failover trigger is listed with its detection mechanism, threshold, and owning component.

Missing trigger for a documented dependency; trigger described without a detection mechanism.

Parse the output for a list of triggers. Cross-reference against the [SYSTEM_ARCHITECTURE_DOC] dependency inventory. Flag any dependency with no matching trigger.

Consistency Trade-off Documentation

For each data store, the output states the replication mode, consistency level, and the documented risk of stale reads or lost writes during failover.

Data store listed without replication mode; consistency level described as 'strong' without acknowledging partition behavior.

Extract all data store references. For each, check for presence of replication mode, consistency level, and a risk statement. Flag missing fields.

Split-Brain Scenario Coverage

At least one concrete split-brain scenario is described with the system's expected behavior, detection method, and resolution strategy.

No split-brain scenario present; scenario described without a resolution strategy; resolution relies on manual intervention without an SLA.

Search output for 'split-brain' or network partition language. Verify a detection method and a resolution strategy are both present. Flag if only one is present.

Capacity and Routing Cutover Detail

The output specifies the DNS or routing cutover mechanism, expected propagation delay, and the pre-warmed capacity target in the standby region.

Cutover mechanism described as 'manual' without a runbook reference; no capacity target stated; propagation delay omitted.

Check for DNS record, BGP, or global load balancer reference. Verify a numeric capacity target and a time estimate for propagation. Flag missing numeric values.

Partial Degradation Handling

The output describes at least one scenario where a single service or AZ fails within a region and states whether cross-region failover is triggered or contained locally.

Only full-region failure scenarios are covered; partial failure triggers full cross-region failover without justification.

Search for 'partial failure', 'AZ failure', or 'service-level degradation'. Verify a decision is stated for each: local containment or cross-region escalation. Flag if only full-region scenarios exist.

Evidence Grounding

Every architectural claim in the output is traceable to a section of the [SYSTEM_ARCHITECTURE_DOC] or a named runbook.

Claim about failover behavior has no source reference; source reference points to a document not in the provided input set.

Extract all claims. For each, verify a citation or explicit grounding statement exists. Flag claims with no source or with a source not present in [SYSTEM_ARCHITECTURE_DOC].

Risk Prioritization

The output ranks identified risks by severity with at least one 'critical' risk that could cause data loss or prolonged unavailability.

All risks ranked 'low' or 'medium'; no risk addresses data loss; severity ranking is present but no justification is given.

Extract the risk section. Verify at least one risk is labeled 'critical' or 'high' with a justification that mentions data loss or extended downtime. Flag if all risks are low/medium.

Human Review Gate

The output explicitly marks any finding that requires human architectural judgment before acceptance, with a clear question for the reviewer.

Output presents all findings as definitive conclusions; no reviewer question is posed; high-severity finding lacks a recommended human decision point.

Search for 'reviewer', 'decision required', or 'human judgment'. Verify at least one explicit question is directed at the architecture reviewer. Flag if the output reads as a final report with no open decisions.

ADAPTATION OPTIONS

Adapt This Prompt

How to adapt

Add strict JSON schema validation, retry logic for malformed outputs, and structured logging of each audit run. Wire [OUTPUT_SCHEMA] to a typed object with required fields for each finding: finding_id, category, severity, affected_components, evidence, remediation. Add a confidence field per finding. Include eval cases for split-brain, partial region degradation, and DNS propagation delays.

Prompt snippet

code
You are a cloud resilience auditor. Given [REGION_CONFIG] and [TRAFFIC_ROUTING_CONFIG], produce a JSON audit following [OUTPUT_SCHEMA]. For each finding, cite the specific configuration element that creates the risk. If evidence is insufficient, set confidence to LOW and flag for human review. Include test scenarios for: (1) complete region failure, (2) partial service degradation in one region, (3) network partition between regions.

Watch for

  • Silent format drift when model changes version
  • Missing human review gate for HIGH severity findings
  • Schema validation must handle null fields gracefully
Prasad Kumkar

About the author

Prasad Kumkar

CEO & MD, Inference Systems

Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.

His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.