Case study
Nine people for twelve months, or three for three
On the same product rewrite, a traditional nine-person Scrum team is estimated at about twelve months and 108 person-months. Three senior engineers directing AI coding agents are on track for about three months and 9 person-months. The gain holds only with guardrails: written specs, automated tests and security scans, and a human review of every line. The company in this case study is fictional.
Team Atlas: 9 people, 12 monthsTeam Forge: 3 people + agents, ~3 months
Brightline Software needs to rebuild RosterPoint, its workforce-scheduling product, and fold four products into one platform. CTO Rachel Moreno compares two ways to staff it: a traditional Scrum team, and a small senior team directing AI coding agents.
Brightline Software, RosterPoint, Brightline One and every person named here are fictional. The schedule figures are modeled on a real rewrite in progress; Team Forge's three months is a projection, not a shipped result. Cost figures are round-number assumptions.
The two teams
Atlas spreads the work across specialists. Forge puts the judgment in three seniors.
Team Atlas, led by engineering manager Daniel Ortiz, is a conventional cross-functional Scrum team. Team Forge, led by principal architect Maya Chen, is three senior engineers who write specs, run several agent sessions in parallel, and review every line the agents produce.
How the work flows
Atlas spends people's time writing code. Forge spends it specifying and checking.
| Stage | Team Atlas | Team Forge |
|---|---|---|
| Understanding the legacy system | Weeks of reading code and interviewing experts | Agents read the whole codebase and pull out the business rules in days; people check them |
| Requirements | User stories groomed in backlog sessions | Detailed written specs become the main input |
| Build | Hand-written code in two-week sprints | Several agent sessions run in parallel |
| Testing | QA writes and runs tests after development | Tests written alongside the code gate every change |
| Coordination | Standups, planning, retros, hand-offs | Three people share context directly |
Timeline and cost
Forge ships about nine months earlier, for roughly a tenth of the cost.
Quality, security and risk
Forge's main risk is unchecked output, not speed.
Code that compiles and passes a demo can still hide a security hole or a wrong business rule. None of these risks is new; AI shortens the time in which they can pile up, so what a traditional team treats as good practice becomes mandatory for Forge.
| Risk | Atlas | Forge | How Forge handles it |
|---|---|---|---|
| Security vulnerabilities | Moderate | Higher | Static analysis, dependency scanning and a security review on every merge |
| Lost business rules | Moderate | Moderate | Characterization tests against the legacy system; replay of real customer data |
| Review overload | Low | High | Small, focused changes; tests as the first gate |
| Key-person dependency | Spread | Concentrated | Agent-written docs, recorded specs, pairing |
| Maintainability | Familiar | Unfamiliar | Enforced standards, architecture rules, refactoring passes |
| Vendor and tooling | None | Present | Keep the code tool-agnostic; avoid pipeline lock-in |
What the research says
AI amplifies whatever discipline a team already has.
of nearly 5,000 technology professionals in Google's 2025 DORA report use AI, and adoption is now linked to higher delivery throughput. The report calls AI a mirror and a multiplier: it lifts cohesive teams and exposes weak ones.
of developers report high trust in AI-generated output, in the 2025 Stack Overflow Developer Survey, as reported by InfoQ.
of coding tasks produced code with security flaws, across more than 100 models tested by Veracode. For Java, the failure rate was over 70%.
The rewrite fits the favorable profile: unfamiliar legacy code, a fresh architecture, and senior people who check instead of trust. The METR trial is the warning: Forge should track measured cycle time and defect rates, not how fast the work feels.
Limits
Where a team like Atlas still wins
- Regulated or safety-critical systems such as medical, avionics and payment cores, where every line needs traceable human authorship.
- Large, tightly coupled codebases that three people cannot hold in their heads, and where AI tools do worst.
- Experts in code they know deeply, the setting where METR measured a slowdown.
- Stakeholder-heavy change programs, where people, not code, are the constraint.
- Growing new engineers. A seniors-only team builds no talent pipeline.
Lessons for leaders
What Rachel Moreno would tell another CTO
Staff for judgment, not keystrokes. Put the most senior architects on the AI-native team; their review is the quality gate.
Build the guardrails first. Tests, static analysis and security scanning must exist before agents produce code at volume.
Treat the spec as the product. The quality of the written requirements now sets the quality of the output.
Measure instead of trusting the feeling. Track cycle time, escaped defects, rework and security findings against the traditional baseline.
Pilot on a bounded, high-value project. A rewrite with clear scope is a good start; a sprawling coupled system is not.
Plan the people transition. Move people toward review, domain expertise and customer work rather than simply cutting.
Keep a human accountable for every merge. AI drafts; a named engineer owns what ships.
Planning an AI-assisted rewrite?
I help teams plan and run them: the specs, the guardrails, the review and the estimate. Every engagement starts with a free 30-minute call. The way we plan every project, from the goal to an estimate in AI time and Dev time, is free to copy.
Sources
- How are developers using AI? Inside our 2025 DORA report, Google, September 23, 2025
- DORA Report Finds AI Is an Amplifier, But Trust Remains Low, InfoQ, September 2025, citing the 2025 Stack Overflow Developer Survey
- Measuring the Impact of Early-2025 AI on Experienced Open-Source Developer Productivity, METR, July 10, 2025
- We are Changing our Developer Productivity Experiment Design, METR, February 24, 2026
- AI-Generated Code Poses Major Security Risks in Nearly Half of All Development Tasks, Veracode, July 30, 2025