TestForge

SDLC and STLC

How software gets built, where testing sits inside it, and why 'shift left' is more than a slogan.

10 minQA Fundamentals

SDLC: how software gets built

The Software Development Life Cycle is just the sequence of activities that turns an idea into running software: requirements → design → implementation → testing → deployment → maintenance.

What changes between methodologies is not which activities happen, but how big a batch they happen in and how often.

ModelBatch sizeTesting happensYou'll meet it in
WaterfallThe whole productOnce, near the endGovernment, medical, some banking
V-modelThe whole productEach build phase has a matching test level, planned up frontRegulated / safety-critical work
Iterative / incrementalA chunkEvery iterationOlder enterprise teams
Agile (Scrum, Kanban)One storyContinuously, inside the sprintMost product companies today
DevOps / CDOne commitOn every push, automatedModern web teams

The V-model is worth understanding even if you never work in one, because it draws the single most important picture in testing: each level of specification has a level of testing that verifies it.

Requirements ─────────────────────► Acceptance testing
   System design ────────────────► System testing
      Architecture ────────────► Integration testing
         Detailed design ────► Component (unit) testing
                    Code

Read down the left, then up the right. Acceptance testing answers "did we build the right thing?" against the requirements. Unit testing answers "did this function do what its author intended?". Confusing the two is how teams end up with 90% unit coverage and a product nobody can check out of.

STLC: how testing gets done

The Software Testing Life Cycle is the same idea applied to your own work. Six phases, and they repeat at whatever cadence your team ships at — once per release in waterfall, once per story in Agile.

  1. Requirement analysis. Read the story. Find what's missing, ambiguous, or contradictory. Deliverable: questions, and a list of what's testable.
  2. Test planning. Scope, risks, what you'll test and what you deliberately won't, environments, who does what, when you'd stop. Deliverable: a test plan — one page is fine.
  3. Test design. Turn requirements into cases using the techniques in this track. Deliverable: test cases and test data.
  4. Environment setup. A place to run, with data that resembles reality. Often the thing that actually delays you.
  5. Test execution. Run them; log results; raise defects; retest fixes. Deliverable: results, defect reports.
  6. Test closure. What did we learn? What escaped to production and why? Deliverable: a summary and, honestly, better cases next time.

Two entry/exit ideas run through all six:

  • Entry criteria — what must be true before a phase starts (e.g. "build deployed to staging, smoke passed").
  • Exit criteria — what must be true to call it done (e.g. "all P1 cases executed, no open critical defects, coverage of the acceptance criteria complete"). Notice that "no bugs left" is never an exit criterion, because it is not achievable.

Shift left, and why it pays

The cost of fixing a defect rises the later you find it — a requirements ambiguity costs a conversation, the same ambiguity found in production costs a hotfix, a rollback, support tickets and trust.

"Shifting left" means moving testing activity earlier: reviewing requirements, attending design discussions, writing the acceptance criteria with the product owner, pairing with a developer on unit test ideas. None of it involves executing a test case, and all of it is testing.

The practical version for your first job: when a story lands in refinement, read it and bring three questions. That habit alone will change how your team sees you.

Check your understanding

  • In the V-model, which test level verifies the requirements document?
  • Your team ships every day from main. What happens to the STLC phases — do they disappear?
  • Name one exit criterion you could actually measure.

Next: the four test levels, in detail.

Check your understanding

3 questions. No account needed, nothing is sent anywhere but the grader.

  1. 1. In the V-model, which test level verifies the requirements document?

  2. 2. Your team ships to production several times a day. What happens to the six STLC phases?

  3. 3. Which of these is a usable exit criterion?

Answer every question first.