How to Build a Production-Grade Software Factory

Over the past eight months we rebuilt Witted's back office with AI agents. The tally: around 30 repositories, 13 production applications, and close to a million lines of code and documentation, most of it written by agents and not line-reviewed by a human. That only works when verification is mechanical.

I'll walk through the whole factory, from planning sessions where claims has to trace back to a file the agent actually read, through Architect, Engineer and QA agents that deliberately share no memory, to the security and quality guardrails themselves.

One shared pipeline covers every repo, enforced at organisation level, so nobody merges past it. A coverage ratchet that moves only one way. Gitleaks and osv-scanner scan everything. Human review comes in three tiers based on what a change touches, never on who wrote it.