Concepts / Pilot Projects and Staged Rollouts

Pilot Projects and Staged Rollouts

The pilot was staged, starting with three inspectors at one plant and growing to twenty and then sixty

  • Programming

Where Success Really Shows Up

Most people picture a project's success as the moment the software finally works. The case study behind this article suggests that the more revealing moments come later: how the rollout was staged, how it grew, how responsibility was passed to the customer, and what the team learned about the problem it had originally been asked to solve.

EASY

Before reading on, pause and think about this. Suppose your team's first answer to a customer's request turns out to address the wrong problem. What evidence would tell you so? Write down one or two concrete signals before you continue.

Hints
  • Think about what the customer does with the system day to day, not what the request literally said.
  • Consider which early results or customer reactions would be hard to explain if the problem had been understood correctly.

The rest of this article follows one engagement step by step. Each stage is a place where the team could have kept going, paused, or changed direction, so the stages are worth reading as decisions rather than as a simple timeline.

Starting With Three Inspectors

The rollout did not begin across the whole organization. It started small, with three inspectors working at a single plant during the delivery phase, which covered weeks 5 to 9 of the engagement. The pilot was a limited test of whether the system worked in daily use before any broader commitment was made.

The purpose of a pilot is narrow on purpose. A small group, one site, and a fixed window let the team observe real use without betting the whole organization on an unproven result. If the system fails in a small pilot, the cost of that failure is limited and the lessons are easier to see.

Using Early Results to Decide Whether to Continue

Early results were used to decide whether to keep going. Overtime fell to thirty-five minutes per inspector per week during the first two weeks of the pilot. That figure was below the one-hour threshold the team cared about. The number is what made expansion a reasonable next step rather than a leap of faith.

Scaling in Two Checkpoints

The expansion came in two steps rather than one. The count moved from three inspectors to twenty in week seven, and then all sixty inspectors at the lead plant were onboarded in week nine. Each step was a checkpoint. The team had a chance to observe results before moving to the next one.

Weeks 5 to 9: pilot3 inspectors at one plantWeek 7: firstexpansion20 inspectorsWeek 9: full leadplant60 inspectorsWeeks 10 to 12:handoffCustomer IT team takes overcheckpointcheckpointfinal phase
How did the number of users grow at each stage, and what changed between one stage and the next?

Read the timeline from left to right. The user count changed in two jumps, from three to twenty and then from twenty to sixty. The gap between the checkpoints is where the team had a chance to look at results before committing further. The final stage, weeks 10 to 12, was the handoff, which is covered later in this article.

Letting the Customer Shape the Measures

Feedback from the customer also shaped the rollout. The quality manager joined the weekly dashboard review and proposed two additional rubric criteria she wanted tracked. Both were added.

A pilot is therefore not only a technical test. It is also a way of learning which measures the customer actually needs to see. A team that treats the first list of measures as final may keep reporting numbers that nobody uses, while the customer's real questions go unanswered.

The Validation Gate Before Production

The case study makes a sharp claim: the problem as originally stated was the wrong problem. The team found something else. A validation gate caught a serious failure mode related to model inference. Had it gone undetected, that failure would have become an audit liability once the system was in production. The gate is the reason the issue was found while it could still be fixed.

The idea to hold onto is placement. A checkpoint that sits before production has the power to stop a failure from crossing into the live system. The same failure found after release is a different problem: it is already part of what the customer depends on, and it may already be recorded as a liability.

Change fromdevelopmentValidation gatechecks before productionSerious failure foundfixed before productionProductionno liability introducedsubmittedfailspasses
Where does the gate sit in the path from development to production, and what happens to the failing change versus the passing change?

Audit-Readiness Versus Completeness

In this engagement, audit-readiness took precedence over completeness because the customer required it. Two terms need separating here. Completeness asks whether everything that was planned has been built or covered. Audit-readiness asks whether the work can be examined and shown to meet the requirements an auditor or the customer will check. A system can be quite complete and still be hard to audit, and a system can be less complete but still be ready for scrutiny.

AspectCompletenessAudit-readiness
Main questionHas everything planned been covered?Can the work be examined and shown to meet requirements?
Typical focusBreadth of features and scopeEvidence, traceability, and controls that hold up under review
Risk it addressesMissing functionalityLiability if a failure is found after release
When a customer may rank it higherWhen coverage of the full scope is the priorityWhen the customer must be able to demonstrate compliance, as in this case

Completeness and audit-readiness answer different questions, so they can pull a project in different directions.

The reason a customer ranks one above the other is their own requirement. In this case the customer required audit-readiness, so the team had to put that first even where it meant coverage could not be as broad. The source does not list the specific tradeoffs the team accepted, so the general lesson is simply to find out which property the customer's requirements actually make mandatory before deciding what to optimize.

Structural Paving Candidates

Definition

A paving candidate is something that can be reused as a foundation. In this case study, the paving candidate was not a new button or report. It was a rule about how the system behaves, and that rule could benefit customers beyond the one that first raised the need.

The source describes these as structural paving candidates. They encode a discipline in the system, and they are often more valuable than feature-shaped ones. A feature-shaped candidate is a visible addition, such as a new screen or report, that serves a specific request. A structural candidate changes how the system itself behaves, so its value carries over to other customers.

Rule about systembehaviorReusable foundationBenefits othercustomersNew button orreportVisible additionServes a specificrequest
What distinguishes a structural paving candidate from a feature-shaped one, side by side?
Best practice

When a request arrives, ask whether the fix would change a rule the whole system follows, or only add something visible for one customer. Structural candidates are worth looking for during a pilot, because the pilot is where you see how the system behaves in real use.

Handing Off to the Customer's IT Team

The final phase of the engagement, weeks 10 to 12, was the handoff. The source reports that responsibility passed to the customer's internal IT team and that the transition went cleanly. A handoff that goes cleanly is one where the people who will run the system can keep it running without the original builders present. That is the real test of whether the implementation was successful.

  1. 1
    Run the pilot in daily use with a small group, and watch results against an agreed threshold.
  2. 2
    Expand in checkpoints, observing results before each next step.
  3. 3
    Adjust the measures the customer needs, as the quality manager did with two rubric criteria.
  4. 4
    Place validation before production so serious failures are caught while they can still be fixed.
  5. 5
    Transfer responsibility to the customer's IT team, and confirm they can operate the system without the original builders.

Mistakes When Reading a Pilot

  • Common mistake

    Treating the moment the software works as the end of the project

    What it looks like

    A team celebrates a working build and stops watching how the rollout grows.

    Why it fails

    The source places the more revealing moments later, in staging, growth, handoff, and what the team learned about the problem.

    Do this instead

    Track the staged rollout and the handoff as part of success.

  • Common mistake

    Expanding without a threshold

    Why it fails

    Early numbers only justify the next step when they are compared against a standard chosen in advance, such as the one-hour threshold in this case.

    Do this instead

    Agree on the threshold before the pilot starts and check results against it at each checkpoint.

  • Common mistake

    Assuming the validation gate is a formality

    What it looks like

    A serious failure related to model inference would have become an audit liability in production if it had gone undetected.

    Why it fails

    A checkpoint is only valuable if it finds real problems, and it finds them only if it sits before production.

    Do this instead

    Place validation before production and treat its findings as evidence that the problem was caught in time.

  • Common mistake

    Assuming completeness and audit-readiness are the same thing

    Why it fails

    They answer different questions, and the customer may require one before the other.

    Do this instead

    Ask the customer which property their requirements make mandatory before optimizing.

  • Common mistake

    Counting a visible addition as structural value

    What it looks like

    A new button or report is added for one request.

    Why it fails

    A feature-shaped candidate serves a specific request, while a structural paving candidate changes how the system behaves for others.

    Do this instead

    Ask whether the change alters a rule the system follows, and whether that rule would help other customers.

Practice: Reading a Rollout

MEDIUM

A team pilots a system with three users at one site for four weeks. Week five shows overtime at forty minutes per user per week, against an agreed one-hour threshold. The team then expands to twenty users, and later to the full site. Before the full expansion, a validation check finds a serious failure that would have caused a liability if it had reached production. Explain, in your own words, why the team's choice to expand in steps, and the timing of the validation check, each mattered to the outcome.

Hints
  • Consider what the threshold gave the team the ability to decide, and what the checkpoints allowed them to observe.
  • Think about the difference between finding a failure before production and finding it after release.

Key Takeaways

  • A pilot is a limited test of whether a system works in daily use, and its early results should be compared against a threshold chosen in advance.
  • Scaling in checkpoints, such as three inspectors to twenty to sixty, lets the team observe results before each further commitment.
  • A validation gate placed before production can stop a serious failure, such as one related to model inference, from becoming an audit liability.
  • Audit-readiness and completeness answer different questions, and the customer's requirements decide which one takes priority.
  • Structural paving candidates change how the system behaves and carry value to other customers, while feature-shaped candidates serve a specific request.