Autonomous in the loop. Accountable at the gates.
The agents document, design, build, test and operate on their own, but a named person signs off before each new stage begins. Three human gates turn an autonomous fleet into an accountable migration: assessment, design, and promotion.
Five stages. Three gates. One inner loop.
Each gate sits between two stages: the agents can't start the next stage until a person signs off the last one. Inside Build → Test → Operate, the agents iterate on their own, the gate comes once the suite is green.
Document
Documenters reconstruct the functional behavior of every legacy asset into the knowledge base; the Surveyor scores complexity and prioritizes the backlog.
Architect
The Architect turns the knowledge base into a Target Design Spec, applying your naming, error-handling and orchestration standards.
Build
Builders generate the assets for the chosen platform and flavor.
Test
Test agents and the Reconciler verify the generated assets against the documented legacy behavior.
Operate
Operators deploy and run in DEV; failures go back to the builders and the loop repeats until the suite is green.
What each gate reviews, and what it unlocks.
Every gate gives a person a prepared artifact, a clear set of criteria, and a single decision: sign off, or send it back.
Assessment sign-off
- Every in-scope asset is documented in the knowledge base
- Documented behavior matches what the legacy assets actually do
- Risk scores and drivers reflect reality
- The backlog priority is agreed
Design sign-off
- Workload placement fits your platform strategy
- Naming, medallion and error-handling standards are yours
- Security and governance grants are correct
- The spec is approved as the build contract
Promotion sign-off
- Tests and expectations pass
- Reconciliation delta is zero or explained
- The iteration count and issue severity are acceptable
- Sign-off is recorded for DEV → ACC → PRD promotion
Inside Gate 3: the loop that fixes itself.
Between the design gate and the promotion gate, there's no human in the inner loop. The Operator runs the build in DEV, the Test agents and the Reconciler flag what doesn't match the documented behavior, and the builders patch it: over and over, until the suite is green. Every iteration is logged.
Operator runs
Deploys to DEV and runs the pipelines for real, reading every failure.
Tests flag
Test agents and the Reconciler compare the output against the documented legacy behavior.
Builders patch
The fix is generated and the loop re-runs, no human in the inner loop.
Green on iteration 3: the human reviews the iterations, severity and tests at Gate 3.
The loop is automatic. The verdict isn't.
When the suite is green, a person reviews the validation report before anything is promoted. They're not re-running the work, they're judging the evidence the loop produced:
- Benchmarks and the reconciliation delta: zero, or explained
- How many iterations it took to reach green
- The severity of what failed along the way
- The test suite and the data-quality expectations
Only then does it promote through your existing DEV → ACC → PRD process. Every iteration is recorded in the knowledge base, so the verdict is informed and auditable.
Speed from the agents. Accountability from your experts.
Nothing ships unsigned
No design is built and no asset is promoted without a named person's sign-off. The autonomy stops at the gate.
Auditable by design
Each asset's gates block records who approved what and when, a trail your governance and auditors can follow.
Cheap to correct
Issues surface at a gate, not in production. Sending a stage back early costs minutes, not a release.
The validation gates, answered.
Who signs off at each gate?
Your people. The assessment is signed by your data and migration leads, the design by your architects and platform owners, and promotion by your data owners and release managers. The agents prepare the evidence; your experts make the call.
What happens if we reject at a gate?
Nothing proceeds. The stage re-runs with your feedback (re-document a misread asset, adjust the design, or send a build back into the loop) until you're satisfied. Catching it at a gate is far cheaper than catching it in UAT or production.
Are the sign-offs recorded?
Yes. Every knowledge-base entry carries a gates block recording the state (approved or pending) at each gate, so the trail is auditable and you always know what has been signed and what has not.
Does adding gates slow the migration down?
The agents do the heavy lifting continuously and autonomously inside the loop; the gates are decision points, not queues. You review prepared evidence (a scorecard, a design spec, a validation report) rather than reverse-engineering what happened.
Can we map gates to our own governance?
Yes. The three gates align to assessment, design and production promotion, and the reviewers and approval steps map to your existing roles and DevOps process: the fleet fits your governance; it doesn't replace it.
Keep your experts in control.
See the gates on your own estate: the assessment fills the knowledge base for a representative slice, and your team signs off Gate 1 before anything else begins.
Plan my migrationA short form, no spam. We usually reply within one business day.