Readiness scorecard
Eight questions, about 10 minutes, for a CTO or VP of Engineering. Each comes from eight months of running AI agents on a commercial Java product with paying customers.
How to answer. Pick what is true today, not what is planned; if torn between two, pick the lower. No agents yet? Answer for what is in place now, and where one would run. Your total appears as you go, with a summary to copy and send me. Your answers stay in your browser: nothing on this page is stored or sent anywhere.
1. How long does a full build take, and when it goes red, how often is the cause real?
Why it matters: every agent mistake costs a build, and builds slow as agents add tests: my full build doubled, from about 30 minutes to about an hour.
2. Could an agent take your next ten backlog items without asking anyone a question?
Why it matters: every question an agent asks waits for a person, and in my fleet, once the budget was paced, the binding constraint was me.
3. Who approves what an agent raises, and what happens to the queue when they're away?
Why it matters: five agents produce more than one person comfortably approves. While I was away in October, an estimated 104 pull requests queued.
4. Could an agent read a production credential, or reach a host you haven't approved?
Why it matters: an agent runs the code it writes and reads what it fetches, so a mistake, or a page written to mislead it, puts at risk whatever it can read or reach.
5. What stops the agents when the week's budget runs out on a Wednesday?
Why it matters: in July my agents' weekly budget kept running out mid-week, and July had 12 days without a single merge.
6. Who or what notices an agent that is stuck, idle or duplicating work, and can it act without waking you?
Why it matters: with their supervisor switched off, my agents committed work for four days, then almost nothing, and nothing noticed they had stopped.
7. Which of your rules are enforced by a check that refuses, and which only by a document?
Why it matters: an agent reads a rule, believes it, then forgets it. Mine were told to tick off work items by hand: of 431 items, they ticked 7.
8. Can you count merged pull requests, cycle time and failed changes from your own records, and are you counting the thing you mean?
Why it matters: agents generate so much activity that the wrong count is easy: my first count took merge commits for merged work and overstated throughput about 2.4 times.
Your total:
Your total, out of 24
Gates. Whatever the total, a 0 on question 3 or 4 means "prepare, then pilot" at best. With nobody to approve (3), the agents' work only queues: a pilot keeps a person approving every merge. An agent that can read a production credential (4) is a risk no total outweighs: a pilot runs agents where they can read none, so that comes first.
A pilot sets up what questions 5 and 6 ask about, so 0 or 1 there is normal.
What happens next
Whatever your total, send me your eight scores and we'll set up a 30-minute call on your answers. If a pilot makes sense, the discovery assessment comes first (2 weeks). I review your pipeline and codebase against the scorecard, checking each answer. You get a readiness report, a pilot plan with its first pieces of work, the design of your human gate, and a cost model.