BY baoyu.io — Bilingual Study Editionbaoyu.io 最新 50 篇精读
All ↩目录 ↩
#27baoyu.io宝玉 · 2026-04-13 · baoyu.io

Why Your "AI-First" Strategy Is Probably Wrong为什么你的"AI 优先"战略可能大错特错?

AI-first sounds great, but without engineering scaffolding underneath, it's a building on sand.AI First 听着美好,但没有工程基础支撑,就是在沙子上盖楼。

01

Concise Summary简洁概述

AI-first means redesigning process, architecture and org chart around 'AI is the primary builder' — not sprinkling Copilot into an unchanged agile workflow.

It only works if testing, CI/CD, monitoring, task management and architecture are already solid — otherwise AI just produces unreviewable output faster.

AI 优先意味着围绕"AI 是主力构建者"这一假设重新设计流程、架构和组织,而不是在原有敏捷流程里加一层 Copilot。

这套打法只有在测试、CI/CD、监控、任务管理和架构都足够扎实时才成立,否则 AI 只是更快地产出无法审查的代码。

02

Infographic信息图

6 阶段
stages
CI/CD 流水线阶段数
3→8 次/天
deploys/day
14 天内日均生产部署次数
25 vs 100×
headcount ratio
CREAO 员工数对竞对人力的比例
🧱

Monorepo as AI visibility

统一代码库=给 AI 装上全景视野

CREAO merged fragmented repos into one monorepo purely so agents could see cross-service consequences and run integration tests locally — fragmentation is tolerable for humans but invisible to AI.

CREAO 把分散的多个仓库合并成一个 monorepo,唯一目的是让智能体能看到跨服务的连锁反应、能在本地跑集成测试。碎片化架构对人类工程师尚可应付,对 AI 却完全是黑盒。

🔁

Six-stage deterministic pipeline

六阶段确定性流水线

Every change passes verify→build/deploy-dev→test-dev→deploy-prod→test-prod→release with zero manual overrides. Determinism matters because AI needs predictable pipelines to reason about failures, not just speed.

每次改动都走验证-部署开发-测试开发-部署生产-测试生产-正式发布六个阶段,没有人工强行放行的口子。确定性本身就是设计目标:AI 需要可预测的流水线才能推理失败原因,而不只是图快。

🩹

Self-healing triage loop

自愈式分诊闭环

A daily cron pulls CloudWatch data, an AI triage engine clusters errors into deduped tickets with logs and root-cause hints attached, engineers just approve fixes, and the same pipeline re-verifies and auto-closes tickets.

每天定时从 CloudWatch 拉数据,AI 分诊引擎把错误聚类去重、自动生成带日志和排查建议的工单,工程师只需批准修复,同一条流水线负责验证并自动关闭工单,人工介入降到最低。

🧠

Architect vs Operator split

架构师与操作员的角色重组

Only 1-2 architects design guardrails and define what 'good' means to agents; everyone else becomes an operator investigating AI-flagged tickets and approving fixes — critical thinking replaces code output as the scarce skill.

只留 1-2 名架构师负责设计护栏、定义在 AI 眼里什么算"好";其余人变成操作员,负责调查 AI 标记的工单并批准修复。写代码不再稀缺,挑 AI 逻辑漏洞的批判性思维才稀缺。

The argument, step by step
论证推进链条
1
Diagnose the real bottleneck: it's no longer code output, it's humans in the review/planning/QA loop while AI writes code in hours.
先诊断真正的瓶颈:不再是代码产出速度,而是人类卡在评审、规划、测试环节,AI 几小时就能写完代码。
2
Distinguish 'AI-assisted' (Copilot bolted onto unchanged workflow, +10-20%) from genuine 'AI-first' (process redesigned around AI as builder, exponential gap).
区分"AI 辅助"(把 Copilot 塞进不变的流程,提升 10%-20%)和真正的"AI 优先"(围绕 AI 作为构建者重新设计流程,差距是指数级的)。
3
Build the scaffolding first: unify the codebase into a monorepo, wire a deterministic six-stage CI/CD pipeline, add structured/queryable logging everywhere.
先搭脚手架:把代码库统一成 monorepo,打通六阶段确定性 CI/CD,让所有基础设施都暴露结构化、可查询的日志。
4
Insert AI as a hard gate, not a suggestion: three parallel Claude reviews (quality, security, dependencies) must pass before human review even starts.
把 AI 变成硬性关卡而非建议:三路并行的 Claude 审查(质量、安全、依赖)必须先通过,人工审查才只看战略风险。
5
Close the loop end to end: feature flags for instant kill-switches, A/B tests for real data, and a daily triage engine that detects, tickets, and reverifies fixes automatically.
把闭环彻底打通:功能开关支持秒级下线,A/B 测试提供真实数据,每日分诊引擎自动检测、开工单、验证修复。
6
Recognize the scope limits: this works for backend-heavy, fast-iterating, low-safety-risk products — not UI-heavy, quality-sensitive, or safety-critical ones — and org roles must split into architects and operators.
认清适用边界:这套打法只适合后端为主、快速试错、安全风险低的产品,不适合界面密集、质量敏感或安全攸关的场景,同时组织角色要拆分为架构师和操作员两类。
03

Detailed Summary详细解读

The piece opens by naming three bottlenecks that traditional org structure creates once AI compresses build time from weeks to hours: product planning (PMs spend weeks speccing what AI builds in two hours), QA (AI ships code in two hours, testing takes three days), and raw headcount (25 employees against competitors' hundreds). Each bottleneck is a mismatch between a process designed for human-paced work and an AI-paced execution engine — the fix isn't hiring faster, it's removing the human step from the critical path wherever a system can substitute for it.

The technical core is a monorepo plus a six-stage deterministic CI/CD pipeline (verify → build/deploy-dev → test-dev → deploy-prod → test-prod → release), where no stage can be skipped and no human can force a green light. This determinism is the load-bearing design choice: an AI agent can only reason about failures and predict outcomes if the pipeline behaves the same way every time. Alongside it, every PR triggers three parallel Claude reviews (code quality, security, dependency risk) that function as hard gates, not advisory comments — catching classes of errors that a distracted human reviewer running eight deploys a day would miss.

The self-healing loop is the piece's most distinctive mechanism: a daily cron job queries CloudWatch, an AI triage engine clusters errors into deduped tickets across nine severity dimensions with logs and suspected causes attached, and when an engineer submits a fix, the same review-and-deploy pipeline re-verifies it and auto-closes the ticket if metrics recover. This closes detection, triage, fix, and verification into one loop with minimal human touch — the human's role shrinks to investigating and approving, not diagnosing from scratch.

The article is candid about scope: this playbook fits backend-heavy, UI-light products (API services, internal tools, early-stage products expected to iterate fast) where success is measurable in data, not pixels. It explicitly does not fit UI-dense products (interaction and visual polish resist AI judgment), quality-sensitive flagship products (neither Anthropic nor OpenAI runs Claude Code or Codex this way), or safety-critical systems (banking, trading) where a bug can't simply be rolled back. This honesty about limits is what elevates it above generic AI-hype pieces.

The organizational fallout is where the piece turns reflective: only 1-2 'architects' remain who design guardrails and critique AI proposals, while everyone else becomes an 'operator' investigating AI-flagged tickets. Junior engineers adapt faster than senior ones (no habits to unlearn), management time collapses from 60% to under 10%, and the founder reports both less conflict and real anxiety among staff questioning their value — a cost the author frames as genuine and unresolved, not glossed over.

The Chinese commentary that precedes the translation adds a useful discipline: treat 'AI-first' as a checklist against five prerequisites (test coverage, CI/CD, A/B testing and monitoring, task management, architecture clarity) before adopting the philosophy, rather than importing the tactic wholesale. It reframes the article's real message as 'software engineering first' — AI-first is the forcing function that finally makes teams build the engineering discipline they always meant to.

文章开篇点出三个瓶颈,都是因为 AI 把开发周期从几周压缩到几小时后,传统组织架构跟不上了:产品规划(PM 花几周做需求,AI 两小时实现)、测试(AI 两小时写完代码,QA 却要测三天)、纯人力(25 人对抗竞对几百人)。每个瓶颈的本质都是"为人类节奏设计的流程"和"AI 节奏的执行引擎"之间的错配——解法不是招更多人,而是在系统能够替代的地方,把人从关键路径上拿掉。

技术核心是一个 monorepo 加六阶段确定性 CI/CD 流水线(验证→部署开发→测试开发→部署生产→测试生产→正式发布),任何阶段都不能跳过,任何人都不能强行放行。这种确定性是整套设计的承重结构:AI 智能体只有在流水线每次行为一致时,才能推理失败原因、预测结果。与之配套的是每个 PR 触发三路并行的 Claude 审查(代码质量、安全、依赖风险),它们是硬性关卡而非建议——专门拦截一天部署八次、注意力必然分散的人类审查员容易漏掉的错误。

自愈闭环是这篇文章最独特的机制:每天定时从 CloudWatch 拉数据,AI 分诊引擎从九个维度评估严重程度、把错误聚类去重、生成带日志和疑似原因的工单;工程师提交修复后,同一条评审-部署流水线负责重新验证,指标恢复就自动关闭工单。这把检测、分诊、修复、验证四个环节闭合成一个循环,人力介入降到最低——人的角色从"从零诊断"缩小为"调查并批准"。

文章对适用边界很坦诚:这套打法适合后端为主、界面简单的产品(API 服务、内部工具、预期快速迭代的早期产品),因为成败可以用数据衡量而非靠肉眼盯像素。它明确不适合界面密集的产品(交互细节和视觉打磨是 AI 判断力的短板)、质量敏感的旗舰产品(Anthropic 和 OpenAI 自己都不敢让 Claude Code 或 Codex 这样全自动迭代)、以及安全攸关的系统(银行、交易平台,出错不是回滚能解决的)。这种对边界的坦诚,正是它区别于一般 AI 炒作文章的地方。

组织层面的余波是文章最具反思性的部分:只剩 1-2 名"架构师"负责设计护栏、批判 AI 的方案,其余人都变成"操作员",负责调查 AI 标记的工单。初级工程师比资深工程师适应更快(没有旧习惯要打破),管理时间从 60% 降到不到 10%,作者坦言团队摩擦变少了,但员工对自身价值的焦虑是真实存在且无法用漂亮话安抚的——这一点作者没有回避,而是正面承认这是转型的真实代价。

译文前面的中文点评补充了一个实用的检验框架:把"AI 优先"拆成五个前提条件(测试覆盖、CI/CD、A/B 测试与监控、任务管理、架构清晰度)逐一对照自己团队,而不是原样照搬打法。它把原文的真正主旨重新表述为"软件工程优先"——AI 优先只是一个倒逼机制,逼团队真正把一直想做却没动力做的工程改进落地。

04

FAQ常见问答

Isn't this just Copilot-style AI assistance with extra branding?这不就是套了个新名词的 Copilot 式辅助编程吗?

No — the author distinguishes AI-assisted (tools bolted onto an unchanged workflow, +10-20%) from AI-first (process, architecture and org chart redesigned so AI is the primary builder), calling the gap between them exponential.

不是。作者明确区分"AI 辅助"(工具塞进不变的流程,提升 10%-20%)和"AI 优先"(流程、架构、组织架构都围绕 AI 作为主力构建者重新设计),两者差距是指数级的。

What happens if a team adopts this without solid testing/CI first?如果团队测试和 CI 基础不牢就照搬这套打法会怎样?

The Chinese commentary warns this produces fast AI output piling up unreviewed, since every AI commit would need manual regression testing — the speed advantage disappears and technical disaster accumulates quickly.

中文点评指出这会导致 AI 快速产出的代码堆积等待人工处理,因为每次 AI 提交都需要人工回归测试,速度优势荡然无存,技术灾难反而快速累积。

Does this approach sacrifice product quality for speed?这套打法是不是在用质量换速度?

The author claims the opposite: user engagement and paid conversion both rose, attributed to a much shorter feedback loop — daily releases teach more than monthly ones, and bad features die the same day they ship.

作者说恰恰相反:用户参与度和付费转化率都上升了,原因是反馈闭环大大缩短——每天发布一次学到的东西远多于每月发布一次,糟糕的功能上线当天就会被砍掉。

Why would junior engineers adapt better than senior ones?为什么初级工程师反而比资深工程师适应得更快?

Seniors carry years of habits built around slow, human-paced cycles and lose hard-won differentiation when AI does in an hour what took them months; juniors have no such habits to unlearn and see the tools as pure leverage.

资深工程师带着多年围绕慢节奏建立的习惯,AI 一小时干完他们数月的活,让辛苦积累的稀缺技能瞬间贬值;初级工程师没有旧习惯要打破,把工具直接当成放大自身影响力的杠杆。

What's the single biggest risk this piece underplays?这篇文章最容易被低估的风险是什么?

It generalizes from one 25-person, backend-heavy agent platform over roughly two months — there's no data on whether the model holds at larger scale, longer timeframes, or in domains where AI-generated architecture decisions compound invisibly.

文章的依据只是一家 25 人、后端为主的智能体平台大约两个月的实践,缺乏在更大规模、更长周期、或 AI 架构决策会隐性累积风险的领域是否依然成立的数据支持。

05

In-depth Analysis · Pros & Cons深入解读 · 优缺点

This is a bilingual field report from CREAO's founder on rebuilding an entire company around AI as the primary builder rather than an assistant. It reframes 'AI-first' as an engineering-infrastructure problem, not a tooling purchase.

这是 CREAO 创始人一篇亲历式的报告,讲述如何把整个公司围绕"AI 作为主力构建者"而非辅助工具重构。它把"AI 优先"重新定义为工程基础设施问题,而不是买几个工具订阅的问题。

Strengths亮点 / 优点
  • Concrete, inspectable stack
    技术栈具体可核验
    Names exact tools (AWS, GitHub Actions, Claude Opus 4.6, Statsig, Graphite, Sentry, Linear) and their precise role, making the claims falsifiable rather than vague AI-hype assertions.
    点名具体工具(AWS、GitHub Actions、Claude Opus 4.6、Statsig、Graphite、Sentry、Linear)及各自的精确职责,让论断可被验证,而不是空泛的 AI 炒作说辞。
  • Honest about scope limits
    坦诚划出适用边界
    Explicitly excludes UI-dense, quality-sensitive, and safety-critical domains, and notes that even Anthropic/OpenAI don't run their flagship products this way — a rare admission in AI-first advocacy pieces.
    明确排除界面密集、质量敏感、安全攸关的场景,并指出连 Anthropic、OpenAI 自己都不敢这样跑旗舰产品——这在鼓吹"AI 优先"的文章里很罕见。
  • Names the human cost directly
    正面承认人的代价
    Discusses senior-engineer anxiety, identity loss, and 18-hour founder workdays without spin, rather than framing the transition as painless — this credibility strengthens the operational claims.
    直言资深工程师的焦虑、身份认同的丧失、创始人每天 18 小时的煎熬,没有粉饰转型过程——这种坦诚反而增强了其余可操作性主张的可信度。
  • Ties determinism to AI reasoning, not just speed
    把确定性和 AI 推理能力挂钩,而非只谈速度
    Correctly identifies that AI agents need predictable, deterministic pipelines to reason about failure causes — a mechanism-level insight, not just a 'move fast' slogan.
    准确指出 AI 智能体需要可预测、确定性的流水线才能推理失败原因——这是机制层面的洞察,而不只是"跑得快"的口号。
Limits & Critiques局限 / 批评
  • Single company, short timeframe
    单一案例、时间窗口短
    All results come from one 25-person startup over roughly two months post-restructure — no data on durability at larger scale, across multiple product lines, or over years.
    所有结果来自一家 25 人的创业公司重构后大约两个月的观察,没有关于更大规模、多产品线、或数年周期下是否依然成立的数据。
  • No failure cases disclosed
    没有披露失败案例
    The piece reads as a success narrative; it doesn't discuss incidents where the auto-rollback or triage engine misdiagnosed a problem or where a bad AI-authored change slipped past review.
    文章整体是成功叙事,没有讨论自动回滚或分诊引擎误诊、或 AI 编写的糟糕改动漏过审查的具体事故案例。
  • Attributes gains to process, may be model capability
    把提升归因于流程,可能实为模型能力跃迁
    The author admits Opus 4.5 couldn't do what 4.6 can — meaning some of the reported gains may reflect a model-generation jump rather than the organizational redesign itself, confounding the causal claim.
    作者自己承认 Opus 4.5 做不到的事 4.6 能做到——这意味着报告中的部分提升可能来自模型代际跃迁,而非组织重构本身,混淆了因果归因。
  • Skips cost and compute economics
    未讨论成本与算力经济账
    No mention of the token/compute cost of running three parallel Claude reviews per PR plus daily triage scans at scale — a real constraint for teams evaluating whether this is financially replicable.
    完全没提每个 PR 三路并行 Claude 审查加每日分诊扫描的 token/算力成本,这对评估此方案是否可负担的团队来说是个实际缺口。
Bottom line
总评

Read this if you're a CTO or engineering lead evaluating whether to restructure around AI agents — it's the most concrete, mechanism-level account of what 'AI-first' actually requires in infrastructure and org design. Treat the results as a single, short-run case study from a backend-heavy agent platform, not a universal blueprint, and weigh the undisclosed failure modes and cost economics before committing.

如果你是正在评估要不要围绕 AI 智能体重构团队的 CTO 或工程负责人,这篇文章值得读——它是目前对"AI 优先"到底需要哪些基础设施和组织设计最具体、最讲机制的一篇。但要把结果当成一家后端为主的智能体平台的短期单一案例,而非普适蓝图,落地前务必权衡文章未披露的失败模式和成本经济账。

06

Original Text原文

The English text on this side is an AI translation provided for convenience; the authoritative version is the source in the other language.

Today I came across the article "Why Your 'AI-First' Strategy Is Probably Wrong" a few times (the original translation is below), and I want to say something different. Rather than AI First, it should be Software Engineering First.

This article looks like it's talking about AI, but underneath it's all about software engineering.

Setting aside the parts about organization and people, here's a simple summary of the key points from the first half of the original:

In the AI era, people have become the bottleneck. PMs spend weeks on requirements, AI can implement them in two hours—PMs become the bottleneck. QA tests for three days, AI writes code in just two hours—QA becomes the bottleneck. A team of 25 people versus a competitor's few hundred—headcount is also a bottleneck.

What to do? Take people out of the chain. AI writes the code, AI reviews the code, AI runs the tests, AI deploys to production, AI monitors production status, and automatically rolls back when something goes wrong. Every day it scans logs on schedule, automatically discovers issues, assigns tasks, and tracks fixes. The whole pipeline runs on its own, with people only needed to make judgment calls at key junctures.

As for the unified codebase mentioned in the article, that's a nice-to-have, not really central to AI First. It's better to have it, but there are plenty of alternatives if you don't.

Taken as a whole, the approach is internally consistent and produces impressive results: deploying multiple times a day, shipping and pulling features the same day, letting the data decide.

First, check yourself against five things

But before rushing to copy this, think through a few things about your own situation first:

First, automated testing. After AI modifies code, you need a way to confirm it hasn't broken anything else. If test coverage isn't sufficient, you'll have to manually regression-test every AI commit, and there's no way things can move fast that way.

Second, the CI/CD process. From code commit to production deployment, are the testing, review, release, and rollback steps all fully automated? If this pipeline isn't solid, no matter how fast AI writes code, it'll just pile up waiting for someone to handle it manually.

Third, A/B testing and production monitoring. Whether a new feature works well after launch needs to be backed by data, and if it doesn't work you need to be able to turn it off at any time. Without this mechanism, if AI ships five features a day, you won't even know which ones to keep and which to cut.

Fourth, task management. Tasks need to be broken down to the right granularity, and their lifecycle needs to be tracked. Handing AI a big, vague task is more than it can currently handle. When multiple agents are working at once, you need somewhere to manage who's doing what, what's the priority, and how far along things are.

Fifth, system architecture. Code with a messy architecture—or no architecture at all—is just as much of a headache for AI to maintain as it is for a human. Even with the context window full, it still can't figure out where the boundaries are, and fixing one thing breaks three others.

If you can't check off any of these boxes, humans will have to fill the gap. If you can't fill it, AI First is just a slogan.

What scenarios fit, and what don't

But suppose you've got all of this covered—does that mean you can go AI First?

Still no. This approach only fits certain scenarios.

Scenarios where it fits: products that are mostly backend logic without complex interfaces, like API services, data processing platforms, internal tools. Whether a feature works can be verified just by running the data, without needing a human to scrutinize every pixel. The example in the original article is an agent platform, essentially a backend-driven product, so this playbook can work there.

Another fit: early-stage products doing rapid experimentation, where features that don't work get pulled, user expectations aren't that high to begin with, and AI's speed advantage can be fully leveraged.

Scenarios where it doesn't fit:

UI-heavy products. Social media loves to declare that frontend is dead every day, but try having AI build a complex interface—it can't handle the various usability issues, interaction details, or pixel-perfect visual fidelity. Otherwise Elon Musk would've already had AI redesign X who knows how many times by now.

Products where feature quality is sensitive. Do you think Anthropic and OpenAI don't know about AI First? Would they dare do this with Claude Code and Codex? Let AI fully autonomously iterate on their own core products, and users would tear them apart.

Scenarios that demand high security. Banking systems, online trading platforms—if AI code makes a mistake there, a rollback isn't going to fix it.

The real endpoint of AI First

The direction of AI First isn't wrong—it represents a shift in mindset: with every decision you make, ask yourself whether this could be done by AI, and if not, what's missing, and how to fill that gap.

But putting this mindset into practice takes more than buying a few AI tool subscriptions—it also requires building a solid foundation. Get testing, CI/CD, monitoring, architecture, and task management solidly in place, and AI's capabilities will naturally be unleashed. Get it wrong, and adding more AI on top is just building a house on sand.

From this angle, the real endpoint of AI First may not be having AI do all the work, but rather using this momentum to actually push forward the engineering improvements you've always wanted to make but never had the drive to.

It's good to look up at the stars, but you also need to keep your feet on the ground.

Why Your "AI-First" Strategy Is Probably Wrong [Translation]

By Peter Pang. Original: Why Your "AI-First" Strategy Is Probably Wrong

99% of our production code is written by AI. Last Tuesday at 10am, we shipped a new feature, ran an A/B test on it at noon, and killed it by 3pm because the numbers were bad. By 5pm we'd shipped an improved version. Three months ago, a full iteration cycle like that would have taken at least six weeks.

We didn't get here just by installing a Copilot plugin in our code editor. We completely broke down our existing engineering workflow and rebuilt it around AI from the ground up. We changed how we plan, how we write code, how we test, how we deploy, and how we organize the team. We even redefined everyone's role at the company.

CREAO is an AI agent platform. The company has 25 employees, 10 of whom are engineers. We started building agents in November 2025, and just two months ago I rebuilt our entire product architecture and engineering workflow from scratch.

In February 2026, OpenAI introduced a new concept that perfectly sums up what we'd been doing all along. They called it Harness Engineering: the core job of the engineering team is no longer writing code, but empowering agents to do valuable work. When the system fails, the answer is never "try again" or "try harder." The real approach is to ask: what capability is the AI missing? How do we make that capability clearly visible to the agent, and enforce it?

We arrived at this conclusion ourselves, just without a ready-made term for it at the time.

"AI-first" isn't the same as "using AI"

Most companies just force AI into their existing workflows. Engineers open Cursor to help write code, product managers use ChatGPT to help draft requirements docs, QA teams try using AI to generate test cases. The workflow itself stays exactly the same. Efficiency does go up 10% to 20%, but the underlying structure hasn't changed at all.

At best, that's "AI-assisted."

Truly being "AI-first" means completely redesigning your processes, architecture, and organization around the core assumption that AI is the primary builder. You stop asking "how can AI help our engineers?" and start asking "how do we rebuild everything so that AI does the building, while engineers just set direction and judge quality?"

The gap between these two approaches is exponential.

I've seen a lot of teams call themselves "AI-first" while still running the same old agile sprint cycles, the same Jira task boards, the same weekly standups, and the same QA sign-off process. They've just forced AI into the existing loop instead of redesigning the loop.

A typical manifestation of this is what's now commonly called "vibe coding." Open Cursor, keep tweaking prompts until the code runs, commit, repeat. This approach only works for prototyping. A system that's actually meant for production needs to be stable, reliable, and secure. When AI is writing the code, you need to build a system that guarantees those qualities as a backstop. What you need to build are systems—the prompts are disposable.

Why we had to change

Last year, I took a close look at how the team worked and found three bottlenecks that nearly killed us.

The product management bottleneck

In the past, our product managers would spend weeks researching, designing, and drafting detailed feature specs. That's how product management has worked for decades. But an AI agent can implement a feature in just two hours. When development time shrinks from months down to hours, that multi-week planning cycle becomes the biggest drag.

It made no sense to spend months conceiving an idea and then build it in just two hours.

Product managers have to evolve into architects with product thinking, working at the pace of rapid iteration, or they get pushed out of the development loop. Product design has to happen through a "rapid prototype - ship - test - iterate" cycle, not through committee reviews of lengthy requirements documents.

The QA bottleneck

Same story. After an AI agent ships a feature in two hours, our QA team would spend several days testing edge cases and extreme scenarios. Two hours to build, three days to test.

So we replaced manual QA with an AI-built automated testing platform, using AI to test the code AI wrote. Verification speed has to keep up with development speed. Otherwise you're just building a new bottleneck ten feet away from the old one.

The headcount bottleneck

Our competitors have 100 times or more people doing the same work, while we only have 25. There's no way we could out-hire them. Our only path was to redesign our way through.

We needed to embed AI deeply into three systems: how we design products, how we build products, and how we test products. If any one of these still relies purely on humans, it drags down the entire pipeline.

A bold decision: unifying the architecture

I had to start by tackling the codebase.

In the past, our architecture was scattered across multiple independent systems. Changing one feature might require touching three or four repositories at once. From a human engineer's perspective, that was barely manageable. But from an AI agent's perspective, it was a black box. The agent couldn't see the whole picture, couldn't reason about cross-service ripple effects, and couldn't run integration tests locally.

I had to consolidate everything into a single large monorepo. There was only one reason: to let AI see the whole picture.

This is Harness Engineering in practice. The more of the system you turn into something AI can inspect, verify, and modify, the more leverage you get. A fragmented codebase is invisible to AI, while a unified one is clear and legible to it.

I spent a week designing the new system: planning phase, implementation phase, testing phase, integration testing phase. Then I spent another week using agents to help refactor the entire codebase.

CREAO itself is an agent platform. We used our own agents to rebuild the platform that runs agents. If a product can build itself, that proves the approach works.

Our tech stack

Here's our tech stack, and what each piece does.

Underlying infrastructure: AWS

We run on AWS, using auto-scaling container services and a circuit-breaker rollback mechanism. If monitoring metrics degrade after a deployment, the system automatically rolls back to the last safe version.

CloudWatch is the central nervous system of the whole setup. Every service has structured logging, more than 25 automated alerts are configured, and automated workflows query custom metrics daily. Every piece of infrastructure exposes structured, queryable signals. If AI can't read the logs, it can't diagnose problems.

CI/CD: GitHub Actions

Every code change goes through an uncompromising six-stage pipeline:

Validate CI → Build and deploy to dev → Test dev → Deploy to production → Test production → Official release

Gates on every pull request (PR) enforce type checking, lint checks, unit and integration tests, Docker builds, Playwright-based end-to-end tests, and environment consistency checks. No stage can be skipped. No one can force a manual green light. The whole pipeline is completely deterministic, so AI can predict outcomes and reason about failure causes.

AI code review: Claude

Every PR triggers three parallel rounds of AI review from Claude Opus 4.6:

Code quality: checks for logic errors, performance issues, maintainability.

Security: vulnerability scanning, auth boundary checks, injection risks.

Dependency scanning: supply chain risk, version conflicts, open-source license issues.

These are hard gates that must be passed, not just suggestions. They run in parallel with human review, catching in bulk the errors humans tend to miss. When you're deploying 8 times a day, no human engineer can stay laser-focused on every single PR.

Engineers can also tag @claude in any GitHub Issue or PR to get an implementation plan, kick off a debugging session, or request code analysis. The AI agent can see the entire monorepo. Context carries seamlessly across different conversations.

Self-healing feedback loop

This is the soul of the whole system.

Every morning at 9:00 UTC, the automated health-check workflow kicks off right on schedule. Claude Sonnet 4.6 queries CloudWatch, analyzes error patterns across all services, and generates a system health executive summary that gets sent to the team's chat. No one needs to lift a finger to make this happen.

An hour later, the triage engine kicks in. It clusters production errors into categories, scores each issue's severity across nine dimensions, and automatically opens investigation tickets in the task management system. Each ticket thoughtfully comes with log samples, affected users, affected endpoints, and suggested directions for investigation.

The system also deduplicates automatically. If an existing ticket already covers the same class of error, it updates that ticket. If a previously resolved issue resurfaces, it sharply detects the regression and reopens the ticket.

When an engineer submits a fix, the same pipeline takes over. Claude runs three rounds of review, CI validates it. A six-stage deployment pipeline pushes it through the environments and tests it. Once deployed, the triage engine checks the monitoring data again. If the original error is resolved, the ticket closes automatically.

Each tool is responsible for exactly one stage. No single tool tries to do everything. This daily loop creates a "self-healing closed loop": detecting, triaging, fixing, and verifying errors with minimal human intervention.

I told a Business Insider reporter: "AI handles the writing and submitting of code; humans only need to review for strategic risk."

Feature flags and the supporting tech stack

We use Statsig to manage feature flags (a technique for controlling whether features are enabled in code, allowing features to be toggled at any time without redeploying code). Every new feature launches hidden behind a flag. The rollout pattern is very solid: first open it internally to the team, then release it gradually by percentage, and finally either open it up fully or kill it outright. The so-called "one-click kill switch" can instantly disable a feature — no redeployment needed at all. If a feature makes the metrics worse, we can pull it within hours. Bad features die on the same day they launch. A/B testing runs on this same system too.

Graphite manages our branches: the merge queue reruns validation, and only an all-green run gets merged into main. This lets us commit code at high frequency while still reviewing it in an orderly way.

Sentry reports structured exceptions across all services, and the triage engine then combines them with monitoring data. Linear is the human-facing interface: it automatically creates tickets with severity scores and investigation suggestions, then closes them automatically once verification passes.

How a feature goes from idea to production

New feature development path

The architect defines the task as a structured prompt, including codebase context, goals, and constraints.

The agent breaks down the task, plans the implementation, writes the code, and automatically generates accompanying tests.

A PR is opened. Claude runs three rounds of review. Human reviewers only check for high-level risk, rather than getting bogged down line by line.

Pipeline validation: type checking, linting, unit tests, integration tests, end-to-end tests.

Queue, revalidate, merge once it passes.

A six-stage deployment pipeline pushes it through the different environments, with testing at every stage.

The feature flag is opened internally for the team. Rollout proceeds gradually. Metrics are watched closely.

If the metrics deteriorate, it can be killed with one click at any time. Serious issues automatically trigger a circuit breaker and rollback.

Bug fix path

The monitoring system detects an error.

The Claude triage engine assesses severity and automatically opens a ticket with full investigation context.

An engineer steps in to investigate. By this point the AI has already finished the diagnostic work. The engineer just needs to verify the conclusion and submit the fix.

It goes through the same rigorous pipeline of code review, validation, deployment, and monitoring.

The triage engine re-verifies. If confirmed resolved, the ticket closes automatically.

These two paths run on exactly the same pipeline. Same system, same standard.

How are the results?

Over the past 14 days, we've averaged 3 to 8 production deployments per day. Under the old model, we couldn't have shipped even a single release in that same two-week span.

Bad features get killed the same day they launch. New features go live the same day they're conceived. A/B tests validate business impact in real time.

Many people assume we're trading quality for speed. It's the opposite — user engagement is up, and paid conversion is up too. We're building a better product than before, because the feedback loop has become incredibly short. Shipping once a day teaches you far more than shipping once a month ever could.

A brand-new engineering org structure

In the future, there will only be two types of engineers.

Architects

Only one or two people. They design the standard operating procedures and teach the AI how to work. They build the test scaffolding, the integration systems, and the triage network. They call the shots on system architecture and boundaries. They're the ones who define what "good" means in the eyes of the agents.

This role demands extremely deep critical thinking. Your job is to poke holes in the AI, not to blindly trust it. When an agent proposes a solution, the architect needs to be sharp enough to spot the gaps: which failure modes did it miss? Which safety boundaries did it cross? What technical debt is it accumulating?

I hold a PhD in physics. The most useful thing I learned during my doctorate was how to question assumptions, stress-test arguments, and hunt for logical gaps. In the future, the ability to critique AI will be worth more than the ability to write code.

Naturally, this is also the hardest role to hire for.

Operators

Everyone else. The work still matters, but the structure has changed.

Now it's the AI that assigns tasks to humans. The triage system finds a bug, opens a ticket, surfaces the diagnosis, and assigns it to the right person. The human investigates, verifies, and approves the fix. AI submits the code; humans review for risk.

This work still demands a very high level of skill and focus, but it no longer requires the kind of from-scratch systems-architecture reasoning that the old model demanded.

Who adapts fastest?

I've observed a surprising phenomenon: junior engineers adapt faster than senior engineers.

Junior engineers, without entrenched traditional habits of mind, feel like they've been given superpowers. They've picked up tools that can amplify their impact enormously, and they don't have a decade of old habits to unlearn.

Senior engineers with rich traditional experience, on the other hand, have struggled the hardest. Work that used to take them two grueling months, AI now finishes in an hour. For people who spent years honing a scarce skill, that's a brutal blow to absorb.

I'm not passing judgment on who's right or wrong — I'm just describing what I've observed. In this transformation, adaptability matters far more than accumulated past skill.

The human side of things

The death of management

Two months ago, I spent 60% of my time on people management. Aligning priorities, meetings, giving feedback, coaching engineers.

Today: under 10%.

The traditional CTO model tells you to empower the team to handle architecture, train them, and hand off the work. But if the system only needs one or two architects, then I have to be the one who builds it myself first. I went from being a "manager" back to being a "builder." These days I write code roughly from 9am to 3am. I design the underlying logic and architecture of the system, and maintain the scaffolding for the whole infrastructure.

The pressure is greater. But I love the pure joy of "building," much more than the daily grind of "aligning" with people.

Fewer arguments, better relationships

My relationship with my co-founders and engineers has actually gotten better than before.

Before the transition, most of my interactions with the team happened in meetings. Debating tradeoffs, arguing over priorities, going red in the face over technical decisions. Under the old model, these conversations were necessary, but they were also exhausting.

I still talk with the team now. We talk about things outside of work, chat casually, or do team-building activities to unwind. We get along better, because we no longer argue over work that the system can now handle entirely on its own.

The anxiety is real

I don't want to pretend everyone is happy.

When I stopped checking in with everyone every day, some team members felt unsettled. What does it mean if the CTO isn't talking to me? Where's my value in this new world? These worries are entirely reasonable.

Some people spend more time arguing in chat about "whether AI can really replace my job" than they spend actually working. A transition period inevitably brings anxiety. I don't have some perfect line to make it go away.

But I do have one principle: we don't fire an engineer just because they shipped a bug in production. We improve the review process, strengthen testing, add more guardrails. We treat AI the same way. If the AI makes a mistake, we build better verification mechanisms, clearer constraints, and stronger system observability.

Beyond engineering

I've seen companies go "AI-first" in engineering and R&D while every other department still runs entirely by hand.

If engineers can ship a feature in hours, but marketing takes a week to put out an announcement, then marketing becomes the new bottleneck. If the product team is still planning on a monthly cadence, then product planning becomes the bottleneck.

At CREAO, we've pushed the AI-native way of working into every single function:

Product release notes: automatically generated by AI from code change logs and feature descriptions.

Feature demo videos: automatically generated by AI with dynamic walkthroughs.

Daily social media posts: curated and posted automatically by AI.

Health reports and data analysis: generated by AI, pulled from monitoring and production databases.

Engineering, product, marketing, and growth all run on the same AI-native workflow. If one department moves at agent speed while another still crawls at human speed, the human-speed department drags the whole company down.

What this means

For engineers

Your core value is shifting from "volume of code written" to "quality of decisions made." The ability to bang out code fast loses value every month. The ability to evaluate, critique, and guide AI is gaining value fast.

Product sense and taste are critical. Can you glance at an AI-generated UI and intuitively sense something's off before users even complain? Can you look at an architecture proposal and instantly spot the systemic risk the AI missed?

I always tell our 19-year-old intern: deliberately practice critical thinking. Learn to evaluate arguments, hunt for logical gaps, and question assumptions people take for granted. Learn what good design looks like. These skills compound.

For CTOs and founders

If your team spends more time planning a product feature than actually writing the code for it, start cutting there first.

Before rolling out AI agents at scale, build your test scaffolding first. Fast AI without fast verification behind it just produces a rapidly accumulating technical disaster.

Start with a single architect. Find someone who can build this system and prove it works. Once the system is running, bring others into "operator" roles.

Force AI-native practices into every single function.

Be mentally prepared — you will absolutely run into resistance and pushback.

For the industry as a whole

OpenAI, Anthropic, and many independent teams are converging on the same principles: structured context, specialized agents, persistent memory, and closed execution loops. Scaffolding engineering is becoming the industry standard.

The engine driving all of this is the evolution of model capability. I credit every qualitative leap CREAO has made recently to just the last two months. Things Claude Opus 4.5 couldn't do, Opus 4.6 already can. The next generation of models will only make this transformation come faster and harder.

I believe "one-person companies" are going to become very common. If one architect with a fleet of agents can do the work of 100 people, a lot of companies simply won't need to hire a second employee.

This is only the beginning

Most of the founders and engineers I've talked to are still running on the old model. Some are starting to consider making the shift, but very few have actually taken the leap.

A journalist friend told me she'd interviewed about five people on this topic. She said we were further ahead than anyone else: "I don't think anyone else has rebuilt their entire workflow as completely as you all have."

Any team could do this with the tools that already exist. Nothing in our stack is proprietary or secret.

The real competitive edge is having the resolve to rebuild everything around these tools, and the willingness to bear the enormous cost that comes with it. That cost is real, and it's painful: employees' confusion and anxiety, the CTO's grinding 18-hour days, senior engineers doubting their own worth, and the suffocating two-week vacuum where the old system has been torn down and the new one isn't running yet.

We bore those costs. Two months later, the numbers speak for themselves.

We built an agent platform. And that platform is exactly what we used agents to build.

今天刷到《Why Your”AI-First”Strategy Is Probably Wrong》这篇文章(原文翻译我放到下面)几次,说点不一样的。与其说 AI First,不如说软件工程 First。

这篇文章看着在讲 AI,底下全是软件工程。

抛开后面讲组织和人的部分,原文前半段的重点简单总结一下:

AI 时代,人成了瓶颈。 PM 花几周做需求,AI 两小时就能实现,PM 成了瓶颈。QA 测三天,AI 写代码只要两小时,QA 成了瓶颈。团队 25 个人,对手几百人,人力也是瓶颈。

怎么办?把人从链条里拿掉。 AI 写代码、AI 审查代码、AI 跑测试、AI 部署上线、AI 监控线上状态,出了问题自动回滚。每天定时扫描日志,自动发现问题、分配任务、跟踪修复。整条流水线跑起来,人只需要在关键节点做判断。

至于文中提到的统一代码库,锦上添花,和 AI First 关系不大。有当然更好,没有也有很多替代方案。

整套方案听下来,逻辑自洽,效果也漂亮:一天部署好几次,功能当天上当天撤,数据说了算。

先对照自己,想五件事

但先别急着照搬,先对照自己的情况想几件事:

第一,自动化测试。 AI 改完代码,你得有办法确认它没搞崩别的功能。测试覆盖不够的话,每次 AI 提交代码你都得人工回归一遍,那速度根本快不起来。

第二,CI/CD 流程。 从提交代码到部署上线,中间的测试、审查、发布、回滚,是不是全自动跑通了?这条流水线不通,AI 写得再快,代码也堆在那儿等人手动处理。

第三,A/B 测试和线上监控。 新功能上线之后效果好不好,得有数据说话,效果不好得能随时关掉。没有这套机制,AI 一天产出五个功能,你都不知道哪个该留哪个该砍。

第四,任务管理。 任务得拆到合适的粒度,生命周期得跟踪得住。一个大而模糊的任务丢给 AI,现在的能力还啃不动。多个 Agent 同时干活的时候,谁做哪个、哪个优先、做到什么程度,这些都得有地方管。

第五,系统架构。 架构太乱或者压根没有架构的代码,AI 维护起来跟人一样头疼。上下文塞满了还是搞不清边界在哪,改一处崩三处。

这几条里如果有做不到的,就得靠人去补。补不上,AI First 就只是一句口号。

什么场景适合,什么不适合

但假设你全做到了,就能 AI First 了?

还是不行。这套玩法只适合一部分场景。

适合的场景: 后端逻辑为主、界面不复杂的产品,比如 API 服务、数据处理平台、内部工具。功能好不好,跑一下数据就知道,不需要人去盯着每个像素。原文里的就是个 Agent 平台,本质上是后端驱动的产品,可以用这套打法。

再比如早期产品快速试错,功能上了不行就撤,用户预期本来就没那么高,AI 的速度优势能充分发挥。

不适合的场景:

  • UI 密集的产品。 自媒体天天喊前端已死,但你让 AI 做个复杂界面试试,各种易用性问题、交互细节、视觉还原,它搞不定的。否则马斯克靠 AI 早就改了不知道改版 X 多少次了。
  • 功能质量敏感的产品。 Anthropic 和 OpenAI 不知道 AI First 吗?他们敢在 Claude Code 和 Codex 上这么搞吗?让 AI 全自动迭代自家的核心产品,用户不骂死才怪。
  • 安全性要求高的场景。 银行系统、在线交易平台,AI 代码出个差错,那可不是回滚能解决的。

AI First 的真正终点

AI First 的方向没有错,它代表的是一种意识的转变:每做一个决策的时候,想一想这件事能不能让 AI 来做,如果不能,缺什么条件,怎么把条件补上。

但这种意识要落地,靠的不仅是买几个 AI 工具的订阅,还需要把基础搭好。 测试、CI/CD、监控、架构、任务管理,这些做扎实了,AI 的能力自然能释放出来。做不好,加再多 AI 也是在沙子上盖楼。

从这个角度看,AI First 的终点未必是让 AI 干所有的活,而是借着这股力量,把你一直想做但没动力做的工程改进,真正推动起来。

仰望星空是好的,但也还要脚踏实地。


为什么你的“AI 优先”战略可能大错特错【翻译】

作者:Peter Pang 原文:Why Your “AI-First” Strategy Is Probably Wrong

我们 99% 的生产环境代码都是由 AI 编写的。上周二早上 10 点,我们上线了一项新功能,中午进行了 A/B 测试,结果下午 3 点就把它砍掉了,因为数据表现不佳。下午 5 点,我们又发布了一个优化后的版本。如果放在三个月前,这样一个完整的迭代周期至少需要六个星期。

我们能做到这一步,绝不是因为在代码编辑器里装了个 Copilot 插件那么简单。我们彻底打破了原有的工程研发流程,并围绕 AI 进行了全面重构。我们改变了做计划、写代码、测试、部署以及团队组织的方式。我们甚至重塑了公司里每个人的角色。

CREAO 是一个 AI 智能体 (AI Agent) 平台。公司有 25 名员工,其中 10 名是工程师。我们在 2025 年 11 月开始研发智能体,就在两个月前,我从零开始,彻底重组了整个产品架构和工程工作流。

OpenAI 在 2026 年 2 月发布了一个新概念,完美总结了我们一直在做的事情。他们称之为脚手架工程 (Harness Engineering,(注:Harness 原意为马具或安全带,在软件工程中通常指测试支架或脚手架,这里指为 AI 提供工作环境和约束条件的系统工程)):工程团队的核心工作不再是写代码了,而是赋能智能体,让它们去完成有价值的工作。当系统出错时,解决办法绝不是“再试一次”或“再努力点”。真正的解决思路是去问:AI 缺失了什么能力?我们该如何让这个能力对智能体变得清晰可见,并强制它们去执行?

我们自己摸索出了这个结论,只是当时还没有一个现成的名词来定义它。

“AI 优先”不等于“使用 AI”

大多数公司只是把 AI 强行塞进现有的工作流里。工程师打开 Cursor 辅助写代码,产品经理用 ChatGPT 帮写需求文档,测试团队 (QA) 尝试用 AI 生成测试用例。整个工作流程还是老样子。效率确实提升了 10% 到 20%,但本质上的结构没有任何改变。

这顶多叫“AI 辅助” (AI-assisted)。

真正的“AI 优先” (AI-first),意味着你要基于“AI 是主力构建者”这一核心假设,彻底重新设计你的流程、架构和组织。 你要停止问“AI 能怎么帮助我们的工程师?”,转而问“我们该如何重构一切,让 AI 去做构建工作,而工程师只负责指引方向和判断好坏?”

这两种思路带来的差距,是指数级的。

我看到很多团队自称“AI 优先”,却依然在跑原来的敏捷冲刺周期,用着一样的 Jira 任务看板,开着一样的每周站会,还要经过一样的 QA 验收签字流程。他们只是把 AI 强加进了现有的循环里,而没有重新设计这个循环。

这种现象的一个典型表现,就是现在常说的凭感觉编程 (Vibe Coding)。打开 Cursor,不断调整提示词直到代码能跑通,提交代码,然后不断重复。这种方式只能用来做原型验证。一个真正用于生产环境的系统,必须是稳定、可靠且安全的。当 AI 来写代码时,你需要建立一个能兜底并确保这些特性的系统。你需要构建的是系统,而那些提示词是用完即弃的。

我们为什么必须改变

去年,我仔细观察了团队的工作方式,发现了三个差点要了我们命的瓶颈。

产品管理的瓶颈

我们的产品经理过去要花好几周的时间来调研、设计和详细规划产品功能。几十年来,产品管理一直都是这么运作的。但是,AI 智能体实现一个功能只需要两小时。当开发时间从几个月被极度压缩到几个小时,那长达数周的规划周期就成了最大的拖油瓶。

花几个月去构思一个想法,然后只用两小时就把它做出来,这太不合逻辑了。

产品经理必须进化成具备产品思维的架构师,以快速迭代的节奏工作,否则就得退出开发环节。产品的设计必须通过“快速原型 - 发布 - 测试 - 迭代”的循环来完成,而不是靠委员会开会去评审那些长篇大论的需求文档。

测试 (QA) 的瓶颈

情况如出一辙。AI 智能体花两小时上线一个功能后,我们的 QA 团队要花好几天去测试各种边缘和极端情况。开发两小时,测试三天。

于是,我们用 AI 构建的自动化测试平台取代了人工 QA,用 AI 来测试 AI 写的代码。验证的速度必须赶上开发的速度。否则,你只是在离旧瓶颈十英尺远的地方,又建了一个新瓶颈而已。

人力的瓶颈

我们的竞争对手有 100 倍甚至更多的人在做同样的工作,而我们只有 25 人。我们不可能靠疯狂招人来赶超他们,我们只能靠“重新设计”来杀出一条血路。

我们需要把 AI 深度贯穿到三个系统中:如何设计产品、如何实现产品、以及如何测试产品。如果其中任何一个环节依然靠纯人工,它就会拖垮整个流水线。

一个大胆的决定:统一架构

我得先拿代码库开刀。

过去我们的架构散落在多个独立的系统中。修改一个功能可能需要同时动三四个代码仓库。从人类工程师的角度来看,这勉强还能应付。但从 AI 智能体的视角来看,这就像个黑盒。智能体看不到全貌,无法推理跨服务的连锁反应,也不能在本地跑集成测试。

我不得不把所有代码整合到一个大型代码库 (Monorepo) 中。原因只有一个:让 AI 能纵览全局。

这就是脚手架工程理念在实际中的运用。你把越多部分的系统转化为 AI 可以检查、验证和修改的形态,你获得的杠杆效应就越大。碎片化的代码库对 AI 是隐形的,而统一的代码库对它们来说则是清晰易读的。

我花了一周的时间设计新系统:规划阶段、实施阶段、测试阶段、集成测试阶段。接着,我又用了一周时间,利用智能体帮忙重构了整个代码库。

CREAO 本身就是一个智能体平台。我们用自己的智能体,重建了运行智能体的平台。如果一个产品能自己构建自己,那就说明这条路走得通。

我们的技术栈

下面是我们的技术栈,以及每个模块的作用。

底层基础设施:AWS (亚马逊云服务)

我们运行在 AWS 上,使用了自动扩缩容的容器服务和熔断回滚机制。如果部署后监控指标恶化,系统会自动回滚到上一个安全版本。

CloudWatch 是整个系统的中枢神经。所有服务都有结构化的日志,设定了超过 25 个自动警报,自动化工作流每天都会查询自定义指标。每一个基础设施部件都会暴露出结构化、可查询的信号。(注:结构化日志指按统一格式记录的日志,便于机器读取;可查询信号指 AI 能直接检索的关键运行数据) 如果 AI 读不懂日志,它就无法诊断问题。

CI/CD:GitHub Actions

每一次代码修改都要经过一个死磕到底的六阶段流水线:

验证 CI → 构建并部署到开发环境 → 测试开发环境 → 部署到生产环境 → 测试生产环境 → 正式发布

每个拉取请求 (Pull Request, 简称 PR,(注:即提交代码变更的请求)) 上的把关机制,强制执行类型检查、代码规范检查、单元和集成测试、Docker 构建、利用 Playwright 进行的端到端测试,以及环境一致性检查。没有任何一个阶段可以跳过。不允许任何人工强行绿灯。整个流水线是绝对确定性的,这样 AI 才能预测结果并推理出失败的原因。

AI 代码审查:Claude

每一个 PR 都会触发 Claude Opus 4.6 进行三轮并行的 AI 审查:

  1. 代码质量:检查逻辑错误、性能问题、可维护性。
  2. 安全性:漏洞扫描、认证边界检查、注入攻击风险。
  3. 依赖项扫描:供应链风险、版本冲突、开源协议问题。

这些是必须通过的拦截关卡,而不只是提提建议。它们和人工审查并行运作,批量拦截人类容易漏掉的错误。当你一天要部署 8 次时,没有哪个肉眼凡胎的工程师能对每个 PR 都保持高度专注。

工程师还可以在任何 GitHub Issue 或 PR 中圈一下 @claude,让它提供实施方案、开启调试会话或进行代码分析。AI 智能体能看到整个大型代码库。所有的上下文在不同的对话中是无缝贯通的。

自愈反馈循环

这是整个体系的灵魂。

每天早上(UTC 时间 9:00),自动化健康检查工作流准时启动。Claude Sonnet 4.6 会查询 CloudWatch,分析所有服务的错误模式,并生成一份系统健康执行摘要,发送到团队的聊天群里。这都不需要任何人主动去吩咐。

一小时后,分诊引擎启动。它会将生产环境里的错误信息进行分类聚类,从 9 个维度评估每个问题的严重程度,并在任务管理系统中自动生成调查工单。每个工单都贴心地附带了日志样本、受影响的用户、受影响的接口以及建议的排查方向。

系统还会自动去重。如果现有的工单已经涵盖了同类错误,它会更新那个工单。如果以前解决过的问题又出现了,它会敏锐地检测到倒退 (Regression) 并重新打开工单。

当工程师提交修复代码时,同样的流水线会接管一切。Claude 会进行三轮审查,CI 进行验证。六阶段部署流水线将其推送到各个环境并进行测试。部署完成后,分诊引擎会再次检查监控数据。如果原先的错误解决了,工单就会自动关闭。

每个工具只负责一个阶段。没有哪个工具试图包揽一切。这个日常循环创造了一个“自愈闭环”:以最少的人工干预,完成错误的检测、分诊、修复和验证。

我曾对《商业内幕》的记者说:“AI 会负责写代码并提交,人类只需要负责审核有没有战略风险就行了。”

功能开关与辅助技术栈

我们用 Statsig 来管理功能开关 (Feature Flags,(注:一种在代码中控制功能是否启用的技术,允许在不重新部署代码的情况下随时开关功能))。每个新功能上线前都藏在开关后。发布模式非常稳健:先对团队内部开放,然后按百分比灰度发布,最后全面开放或直接砍掉。所谓的“一键关闭”能瞬间停用功能,根本不需要重新部署。如果一个功能导致数据指标变差,我们几个小时内就会把它撤下来。糟糕的功能在上线当天就会“死掉”。A/B 测试也是跑在同一套系统上的。

Graphite 负责管理代码分支:合并队列会重新跑一遍验证,只有一路绿灯才会合并到主干。这让我们可以一边高频提交代码,一边有条不紊地审查。

Sentry 报告所有服务的结构化异常,再由分诊引擎将其与监控数据结合。Linear 则是面向人类的界面:自动创建带有严重程度评分和调查建议的工单,后续验证通过后自动关闭。

一个功能如何从想法走向生产环境

新功能开发路径

  1. 架构师以结构化提示词的形式定义任务,包含代码库上下文、目标和约束条件。
  2. 智能体拆解任务、规划实施方案、编写代码并自动生成配套的测试。
  3. 开启 PR。Claude 进行三轮审查。人类审查员只检查高维度的风险,而不去逐行死磕代码。
  4. 流水线验证:类型检查、代码规范、单元测试、集成测试、端到端测试。
  5. 排队、重新验证、通过后合并。
  6. 六阶段部署流水线将其推送到不同环境,每个阶段都伴随测试。
  7. 面向团队内部开启功能开关。逐步灰度发布。紧盯数据指标。
  8. 一旦数据恶化,随时一键关闭。遇到严重问题自动触发熔断回滚。

Bug 修复路径

  1. 监控系统侦测到错误。
  2. Claude 分诊引擎评估严重程度,自动创建一个包含完整排查上下文的工单。
  3. 工程师介入调查。此时 AI 其实已经做完了诊断工作。工程师只需验证结论并提交修复代码。
  4. 走同一套严格的代码审查、验证、部署和监控流水线。
  5. 分诊引擎重新验证。如果确认解决,工单自动关闭。

这两条路径用的是完全同一套流水线。同一个系统,同一个标准。

成果如何

在过去 14 天里,我们平均每天进行 3 到 8 次生产环境部署。在旧模式下,这整整两周的时间里,我们连一次发布都做不出来。

糟糕的功能在上线当天就会被砍掉。新功能在构思出来的当天就能上线。A/B 测试能实时验证业务效果。

很多人以为我们是在牺牲质量换取速度。恰恰相反,用户参与度上升了,付费转化率也上升了。我们做出了比以前更好的产品,因为反馈闭环变得极短。每天发布一次你能学到的东西,绝对比每个月发布一次要多得多。

全新的工程组织架构

未来只会存在两种类型的工程师。

架构师

只有一两个人。他们设计标准作业程序,教 AI 如何工作。他们构建测试支架、集成系统和分诊网络。他们拍板系统架构和边界。他们来定义在智能体眼里什么才叫“好”。

这个角色需要极其深厚的批判性思维。你要做的是挑 AI 的刺,而不是盲从它。当智能体提出一个方案时,架构师要能敏锐地找到漏洞:它遗漏了哪些失效模式?越过了哪些安全边界?积累了什么技术债?

我拥有物理学博士学位。读博期间我学到的最有用的东西,就是如何质疑假设、给论点做压力测试,以及寻找逻辑漏洞。在未来,批评 AI 的能力将比写代码的能力更有价值。

当然,这也是最难招人的岗位。

操作员

其他所有人。工作依然重要,但结构变了。

现在是 AI 给人类分配任务。分诊系统发现了一个 Bug,创建工单,亮出诊断结果,然后把它分配给合适的人。人类去调查、验证,并批准修复方案。AI 负责提交代码,人类负责审核有没有风险。

这些工作依然需要极高的技能和专注力,但它们不再需要旧模式下那种从头构建系统架构的推理能力。

谁适应得最快?

我观察到了一个出乎意料的现象:初级工程师比资深工程师适应得更快。

没有形成传统思维定式的初级工程师,感到如虎添翼。他们掌握了能无限放大自身影响力的工具,而且没有十几年的老习惯需要去破除。

而拥有丰富传统经验的资深工程师,则经历了最痛苦的挣扎。他们过去需要辛辛苦苦干两个月的活,现在 AI 一小时就干完了。对那些花了好几年时间才练就一身稀缺技能的人来说,这实在是一个难以接受的暴击。

我不是在评判对错,只是陈述我看到的现实。在这场变革中,适应能力远比积累的过往技能更重要。

人性的一面

管理层的消亡

两个月前,我要花 60% 的时间在人员管理上。对齐优先级、开会、给反馈、辅导工程师。

今天:不到 10%。

传统的 CTO 模型告诉你,要赋能团队去做架构,培训他们,把工作交接出去。但如果这个系统只需要一两个架构师,那我就必须先亲自动手去建。我从“管理者”变回了“建造者”。我现在每天大概从早 9 点写代码到凌晨 3 点。我设计系统的底层逻辑和架构,维护整个基础设施的脚手架。

压力更大了。但我很享受这种纯粹“建造”的快乐,而不是天天去跟人“对齐”。

争吵少了,关系好了

我和联合创始人以及工程师们的关系,反倒比以前更好了。

转型前,我与团队的大部分互动都是在开会。讨论技术取舍,争论优先级,为技术决策争得面红耳赤。在传统模式下,这些对话是必需的,但也极其耗费心神。

现在我依然会和团队交流。我们聊工作之外的话题,轻松闲聊,或者组织团建去放松。我们相处得更融洽了,因为我们不再为那些现在完全可以让系统代劳的工作而吵架了。

焦虑是真实存在的

我不想假装大家都很开心。

当我不再每天找大家沟通工作时,一些团队成员感到了不安。CTO 不找我说话意味着什么?在这个新世界里我的价值到底在哪?这些担忧都非常合理。

有些人在群里争论“AI 到底能不能取代我的工作”,花的时间比实际干活的时间还长。转型期不可避免地会带来焦虑。对此我也没有什么完美的安抚话语。

但我有一个原则:我们不会因为一个工程师在线上写了个 Bug 就开除他。我们会改进审查流程、加强测试、增加护栏。对待 AI 也是一样。如果 AI 犯了错,我们就去构建更好的验证机制、更清晰的约束条件和更强的系统可观测性。

工程之外

我看到一些公司在工程研发上采用了“AI 优先”,但其他部门依然是纯手工作业。

如果工程师几小时就能发布一个功能,而市场部要花一周来发公告,那市场部就是新的瓶颈。如果产品团队还在按“月”来做规划,那产品规划就是瓶颈。

在 CREAO,我们将AI 原生的运作方式推行到了所有职能部门:

  • 产品更新说明:由 AI 根据代码变更记录和功能描述自动生成。
  • 功能介绍视频:由 AI 自动生成动态演示。
  • 社交媒体日常发布:由 AI 策划并自动发帖。
  • 健康报告和数据分析:由 AI 从监控和生产环境数据库中提取生成。

工程、产品、市场和用户增长都在同一个“AI 原生”的工作流里运转。如果一个部门以智能体的光速运转,而另一个部门还在以人类的龟速爬行,那么人类的速度就会拖慢整个公司的脚步。

这意味着什么

对工程师而言

你的核心价值正在从“写代码的产量”转移到“做决策的质量”。能快速敲代码的能力,每个月都在贬值。而评估、批判和指导 AI 的能力,正在快速升值。

对产品的敏锐度和品味至关重要。你能不能扫一眼 AI 生成的 UI 界面,在用户抱怨之前就直觉发现它不对劲?你能不能看一眼架构提案,就一眼看穿 AI 漏掉的系统性风险?

我总是告诉我们 19 岁的实习生:去刻意练习批判性思维。学着去评估论点、寻找逻辑漏洞、质疑想当然的假设。去学习什么是好的设计。这些技能是自带复利效应的。

对 CTO 和创始人而言

如果你们产品规划功能的时间,比写代码实现的时间还长,赶紧从那里开始动刀子。

在大规模引入 AI 智能体之前,先建好测试的脚手架。没有极速验证做后盾的极速 AI,只会带来快速累积的技术灾难。

从一名架构师开始。找一个能把这套系统建起来并证明它行之有效的人。等系统跑通了,再安排其他人进入“操作员”的角色。

将“AI 原生”强行推入每一个职能部门。

做好心理准备,肯定会遇到阻力和反对。

对整个行业而言

OpenAI、Anthropic 以及许多独立团队都在向着同样的原则靠拢:结构化的上下文、专业化的智能体、持久化的记忆,以及执行闭环。脚手架工程正在成为行业的标配。

驱动这一切的引擎是模型能力的进化。我把 CREAO 最近发生的所有质变,都归功于过去这两个月。Claude Opus 4.5 做不到的事,Opus 4.6 已经能做到了。下一代模型只会让这种变革来得更猛烈。

我相信,“一人公司”将变得非常普遍。如果一个架构师带着一群智能体就能干 100 个人的活,很多公司根本就不需要雇佣第二名员工。

一切才刚刚开始

我接触过的大多数创始人和工程师,还在沿用传统的模式。一部分人开始考虑转型,但真正迈出这一步的寥寥无几。

一位记者朋友告诉我,她就这个话题大概采访了五个人。她说我们走得比任何人都靠前:“我觉得没有任何人像你们一样,完完全全重构了整个工作流。”

任何团队都可以用现有的工具做到这一点。我们的技术栈里,没有任何一个是独家机密。

真正的竞争优势,在于你下定决心要围绕这些工具彻底重塑一切,并愿意承受随之而来的巨大代价。这种代价是真金白银且痛彻心扉的:员工的迷茫与焦虑、CTO 每天工作 18 个小时的煎熬、资深工程师对自身价值的自我怀疑,以及那段旧系统已拆毁而新系统还未跑通的、令人窒息的两周真空期。

我们扛下了这些代价。两个月后,数据说明了一切。

我们构建了一个智能体平台。而这个平台,正是我们用智能体建起来的。


See all posts