Five handoffs. A feature waits in every queue. Knowledge lives in people's heads.
One owner, three branches in parallel. Agents execute inside the gates. Knowledge lives in the repo.
The owner decides what to build and for whom, and kills low-value directions early — with evidence, not opinion. Cheap prototypes make assumptions testable before anyone commits.
Researches the problem space, drafts candidate directions, builds throwaway prototypes.
Problem framed, user named, success defined, an owner assigned.
Stripe: a two-day AI prototype moved an SDK feature into the next major release — evidence arrived before commitment.
A senior engineer frames the need as a known pattern, sets the boundaries, and steers the model away from over-engineering for hypothetical concerns. Taste and judgment are the scarce input here — and one good decomposition now drives dozens of agent runs.
Proposes two or more structurally different designs with their trade-offs, drafts the spec, checks it against constraints.
Boundaries, trade-offs and acceptance criteria are challenged before any code exists.
Anthropic’s Scion team: experienced engineers had to steer Claude away from over-engineering parts of the system for hypothetical concerns.
The owner writes the task contract: goal, context, policy, skills, success metrics, guardrails. Bounded, with dependencies and acceptance criteria that someone can check without reading the chat.
Decomposes the spec into tasks, drafts the contracts, and picks tasks off the board alongside people.
Goal, context, policy, skills, success metrics and guardrails are all present.
OpenAI’s Symphony: work moved from chat sessions to a task board — bounded, verifiable tasks that agents pick up by dependency.
People step in only for exceptions: an agent that loops or drifts, a task that is no longer worth finishing. One person runs three branches in parallel. 98% is not an AI number — it is what the preparation makes possible.
Implements end to end from the contract — code, tests, migrations — on its own branch, then opens a draft PR with what changed, how it was verified, and the risks.
No direct pushes to main; branch names and draft PRs follow protocol.
Stripe’s Minions: 1,300+ merged PRs a week written end to end by agents and reviewed by people (self-reported, February 2026).
The engineer decides what proof is enough for this change — and what no test can prove. The bar rises with the blast radius.
Generates and runs tests, executes CI, records run evidence — screenshots, logs, reports — against the success metrics.
Tests, lint and security checks pass on the exact commit under review.
Cognition: agents attach screenshots, videos and reports so people verify behavior, not just a diff.
The reviewer asks two things — is this the right problem, and does it fit the system — and makes sure colleagues understand what changed. A green PR is not the same as understanding the product.
An independent reviewer agent, in a fresh context, returns passed or failed for the fixed commit. After three rounds it hands over to a person.
An independent reviewer agent, in a fresh context, returns passed or failed for one fixed commit. Three rounds at most, then a person.
Linear: reviewers look at the preview first, then the implementation — review is where the team still thinks together.
The owner authorizes the merge, watches production and owns the rollback. Releases go out one at a time. Accountability never moved: it is 100% with a person at every stage.
Verifies the merge conditions, ships through the pipeline, diagnoses incidents — but cannot deploy a fix on its own.
CI green, review passed, nothing changed since — plus a person’s signature.
Intercom: agents may approve small PRs, but the person who ships still watches production and owns the rollback.
Someone turns repeated corrections into rules, deletes stale ones, and writes decisions where the next task will find them. And someone grows judgment in new people: “done” is not the same as “learned” — a newcomer must still explain why this design, what changed in the system, and where to look when it breaks.
Updates docs for fact-changing PRs, proposes rules from recurring failures, mines run traces for lessons.
A PR that changes a fact updates the documentation in the same PR. Corrections are written back as rules.
Anthropic’s randomized experiment with 52 engineers: AI help got the task done but lowered mastery of a new skill — so we set learning goals next to delivery goals.
Problem framed, user named, success defined, an owner assigned.
The owner, with product. A human judgment — no tool can make it.
The idea stays a prototype. Nothing enters the loop without all four.
Boundaries, trade-offs and acceptance criteria are challenged before any code exists.
Senior engineers. Review moved left — this is where fixing a mistake is cheapest.
Back to Design. We have paused for days to get this right.
Goal, context, policy, skills, success metrics and guardrails are all present.
The task template. People wrote the template; the template enforces it.
The task does not start.
No direct pushes to main; branch names and draft PRs follow protocol.
Git hooks in the harness.
The push is rejected.
Tests, lint and security checks pass on the exact commit under review.
CI. Our CMMI 5 process rules run here as code.
Red means stop. No review until green — not “ask nicely”.
An independent reviewer agent, in a fresh context, returns passed or failed for one fixed commit. Three rounds at most, then a person.
The review agent, then the human reviewer. An agent’s approval never counts as a person’s.
Back to Build. Change the patch and review starts over.
CI green, review passed, nothing changed since — plus a person’s signature.
Branch protection, and the owner who signs.
Any one missing: the merge is blocked.
A PR that changes a fact updates the documentation in the same PR. Corrections are written back as rules.
The PR template, and whoever stewards the knowledge base.
It does not merge.
What this task must achieve, in one sentence the owner can verify.
The facts an agent needs — relevant docs, past decisions, examples — served from the knowledge base, not re-explained in chat.
The rules that always apply: coding standards, security, what agents may not touch.
Reusable procedures — how we run migrations, write tests, deploy — maintained by the team and shared across projects.
Success metrics: what evidence counts as done. Written before the work starts, so acceptance is a check, not a debate.
Hard limits: no direct push to main, no secrets, budgets, stop conditions. The reins that let the whip be used.
Goal · Context · Policy · Skills · Success Metrics · Guardrails — prepared by people, read by agents. This is what makes 98% possible at Build.
Project memory — decisions, rules and lessons in cards, PRs and docs. Organization memory — a shared knowledge base, components and stack that every project reuses. One project’s lesson is the next project’s starting point.
Corrections become rules; rules are deleted when models outgrow them; the next task starts from a better place. Because the experience lives in the repo, the loop can be copied by another team.
Stripe’s Kai: a platform runs the agents, domain teams own the skills that define “done right”. Tessl: the rules live in a repo anyone can read and change.
Product wrote the requirement, design drew it, front-end and back-end built it, QA regressed it by hand, ops shipped it. Each handoff was a queue, and each queue was where a feature waited.
People. Handoff documents, meetings, and the memory of whoever had been there longest. When they left, the knowledge left with them.
Writing the code — so the whole organization was shaped around getting more of it written.
A full-stack engineer who carries one task from intent to merge: defines done, prepares the contract, lets agents run, reads the evidence, signs. Typically three branches in parallel.
Execute inside the contract — code, tests, draft PRs, independent review — on their own branches. Running more of them is not the goal; the owner’s attention is the scarce resource.
Eight checkpoints, two held by people and six by the harness, so speed cannot turn into an accident.
We have almost no pure front-end or test roles left. Not because they were cut: the testers’ judgment moved into the gates, and the front-end/back-end split moved into the task. People stopped being defined by a job and started being defined by what they own.
Owner — decides what is worth doing, defines done, signs and holds the risk.
Architect — frames the problem, chooses “enough”, reviews specs; the judgment that gets multiplied.
Engineer — steps in on exceptions, sets the evidence bar.
Reviewer — reads the evidence; keeps the team’s shared understanding of the system.
Steward — curates the harness and the knowledge base: rules, skills, evaluations, stale-rule removal.
Mentor — grows judgment in new people; separates “done” from “learned”.
One person wears several in a day; in a small team the same senior is architect, reviewer and mentor. As the organization grows, a hat can become a team. The hats make responsibility explicit without turning people back into job titles.
Anthropic: 80%+ of merged code written by Claude · Uber: 70%+ of PRs attributed to agents · Airbnb: near 60%. Definitions differ; not directly comparable. A study of 802 developers and 196K PRs: AI-written PRs merge at the same rate as human ones, with slightly fewer rollbacks.
Repo figures from our engineering training material (2026-10) — verify before presenting.
Goal, context, policy, skills, success metrics and guardrails prepared up front — so the agents can run at full speed without asking. 98% at Build is the result of this preparation, not a property of the model.
Eight stage gates. The first two are human reviews moved left — worth doing, spec review — where a mistake is cheapest to fix. The other six run as code: hooks, CI, a reviewer agent in a fresh context, branch protection, the knowledge protocol. Our CMMI 5 process rules did not go away; they became automated.
We do not bet on AI never being wrong. We build a track where being wrong cannot become an accident.
Review and knowledge updates keep automating: repeated fixes become lint rules, a PR’s dozen human touches collapse into three decisions.
The front end of the loop — deciding what is worth doing and what “done” means. The back end — signing for outcomes and holding the risk. And the middle — curating the knowledge base and growing judgment in new people, the two jobs that used to count as chores and now shape every future run.
Not more headcount for typing code. Investment in the harness, time protected for learning and knowledge curation, and managers who run attention — deciding what to start, what to stop, and who is learning. Off the saddle, not out of the race.