Summary
Key takeaways
- AI can support the entire software development lifecycle, including requirements, architecture, coding, testing, code review, deployment, documentation, and maintenance.
- Teams should distinguish between AI-assisted development, where humans lead individual tasks, AI-driven development, where agents execute multi-step work under supervision, and AI-native development, where workflows are designed around agents from the start.
- AI adoption is already widespread, but adoption alone does not guarantee productivity improvements or better software quality.
- Coding, test generation, documentation, refactoring, and first-pass code review are among the most practical areas for introducing AI today.
- AI is less reliable for ambiguous requirements, architecture trade-offs, sensitive production decisions, and other tasks that depend heavily on business context and engineering judgment.
- Human review remains essential because AI-generated code can introduce security vulnerabilities, incorrect assumptions, duplicated logic, and maintainability problems.
- Productivity should be measured at the team and delivery level rather than by lines of generated code, prompts, or individual developer output.
- Increasing coding speed without expanding review and testing capacity can create larger pull requests and downstream engineering bottlenecks.
- Secure AI development requires automated security scans, secret detection, provenance tracking, action logging, evaluations, and human approval for sensitive changes.
- Organizations should scale AI usage only after their own delivery, quality, security, and cost metrics demonstrate a measurable improvement.
When this applies
This applies when an engineering team wants to move beyond occasional AI autocomplete and introduce AI systematically into its software development lifecycle. It is particularly relevant for CTOs, engineering managers, product teams, and software development companies adopting coding assistants, coding agents, AI-generated testing, automated review, documentation tools, or AI-supported DevOps. The framework is also useful when a company wants to determine whether AI is actually improving delivery speed, software quality, security, and engineering costs rather than simply increasing the amount of generated code.
When this does not apply
This does not apply as a justification for fully autonomous software development. AI remains weaker in areas involving ambiguous requirements, architectural trade-offs, business judgment, and production incident decisions. It is also not a guarantee that a particular AI coding tool will make developers faster, because results vary depending on developer experience, repository maturity, task complexity, and the surrounding engineering process. Teams using AI only occasionally for simple autocomplete may not need the full governance framework described here.
Checklist
- Identify which parts of the software development lifecycle consume the most repetitive engineering time.
- Start with one or two high-volume use cases such as coding assistance or test generation.
- Decide whether your target model is AI-assisted, AI-driven, or AI-native development.
- Establish baseline engineering and DORA-style delivery metrics before introducing AI tools.
- Define which AI tools, coding assistants, models, and agents engineers are allowed to use.
- Keep human approval in place before AI-generated changes reach protected branches or production.
- Run automated security checks against AI-generated and AI-modified code.
- Add secret and credential detection before commits or external model calls.
- Track provenance so developers can identify AI-generated or heavily AI-modified changes.
- Limit autonomous agents initially to specific repositories and clearly defined task types.
- Log agent actions, tool calls, code modifications, and approvals for auditing and rollback.
- Re-run evaluations whenever models, prompts, tools, or agent workflows change.
- Measure defects, security findings, review time, pull-request size, and rework alongside coding speed.
- Protect senior engineering review capacity as AI increases implementation output.
- Expand AI usage only when team-level delivery, quality, security, or cost metrics improve.
Common pitfalls
- Adding AI coding tools without changing review, security, testing, and governance processes.
- Measuring AI success by generated code volume instead of delivery outcomes.
- Assuming individual developer productivity automatically translates into faster organizational delivery.
- Allowing AI-generated code to bypass normal human review because it looks syntactically correct.
- Giving autonomous agents broad repository or production permissions before defining clear boundaries and approval gates.
- Letting AI generate increasingly large pull requests that overwhelm human reviewers.
- Treating AI-generated tests as sufficient without checking assertions, edge cases, and meaningful coverage.
- Optimizing implementation speed while ignoring duplicated code, maintainability, architecture, and technical debt.
- Choosing AI tools primarily because of popularity or impressive demos instead of security, integration, provenance, and team fit.
- Scaling AI adoption before proving that it improves actual delivery, defect rates, security, or engineering economics.
Three major studies reach opposite conclusions about whether AI makes developers faster. The difference between them is the whole answer.
AI is used across six stages of software development: requirements, architecture, implementation, testing, review and documentation. The research shows the gain is conditional, not automatic. Structured inputs and senior review produce speedups. Loose inputs and shallow review produce rework at higher speed. Uvik Software runs AI-assisted delivery with automated gates on every generated change and senior human sign-off before merge, and reports against client-agreed KPIs rather than vendor benchmarks.
What the research actually shows
Three pieces of research are usually cited in this debate. They do not agree, and that disagreement is the most useful thing in the field.
GitHub and Microsoft, 2023: 55 percent faster
In a controlled experiment, developers using an AI coding assistant completed a well-defined implementation task roughly 55 percent faster than a control group. The conditions matter: clear scope, clean inputs, and a measurable output.
METR, 2025: 19 percent slower
In a randomised controlled trial, experienced open-source developers working in large codebases they already knew well were 19 percent slower when using AI tools. The finding that matters most is the second one: they believed they had been faster. Perceived speed and measured speed moved in opposite directions.
DORA, 2025: AI is an amplifier
Google’s DORA programme surveyed nearly 5,000 technology professionals for its 2025 State of AI-assisted Software Development report. Its central conclusion is that AI acts as an amplifier. It magnifies the strengths of high-performing organisations and the dysfunctions of struggling ones.
Three findings from that report are worth holding onto:
- Around 90 percent of technology professionals now use AI at work, spending a median of about two hours a day with it. More than 80 percent believe it has increased their productivity.
- AI adoption is now positively associated with delivery throughput. This reversed from the 2024 report, where the association was negative.
- AI adoption remains associated with increased delivery instability. More change failures, more rework, and longer times to resolve issues. Speed improved. Stability did not.
A separate finding from the 2025 Stack Overflow Developer Survey supports the caution. Developers reported distrusting the accuracy of AI tools at 46 percent against 33 percent who trust it, and only 3 percent reported high trust in AI-generated output.
What separates the fast case from the slow case
The three studies used the same class of tools and reached opposite conclusions. The variables that changed were the structure of the inputs and the seniority of the person reviewing the output.
Uvik Software’s working conclusion is that AI multiplies whatever discipline it is given. Give it junior engineers and loose tickets and it produces rework at machine speed. Give it senior engineers and structured artefacts and the velocity compounds. The tool is not the variable.
The DORA finding sharpens this further. Throughput rose while stability did not, which means AI is exposing downstream bottlenecks in testing, code review and quality assurance rather than creating them. Those functions were already the constraint. AI made the constraint visible.
Where to use AI, stage by stage
Six places where AI does real work, and the gate that belongs at each one. Skipping the gate is what turns the first study into the second.
| Stage | What AI does | The gate |
|---|---|---|
| Requirements and tickets | Drafts the breakdown of behaviour, edge cases and acceptance criteria | A senior engineer makes it correct. A ticket is ready only when an agent could act on it without guessing. |
| Architecture | Synthesises across existing decision records, maps dependencies and impact before any edit | Feasibility is prototyped before production code. Decisions recorded as architecture decision records. |
| Implementation | Writes code under rules files built from the team’s own conventions | Output must match the existing codebase, not a generic one. Rules files live in the repository. |
| Testing | Generates test suites from existing test patterns. Characterisation tests for legacy paths | Coverage grows with each feature, not afterwards. Legacy paths are covered before any refactor. |
| Review | Nothing. This is the human stage. | Static analysis, type checking and security gates run on every generated change before a human sees it. Then a senior engineer signs off. No autonomous merges. |
| Documentation | Generates documentation from code and keeps it current | Documentation is validated in continuous integration so it cannot silently go stale. |
A sequence that works
The DORA capabilities model points at the same order. Adoption fails when teams start at step four.
- Publish a clear AI stance. Which tools are approved, which model providers may see your code, what the data retention terms are, and where the boundaries sit. DORA found that a clear and communicated stance changes AI’s effect on effectiveness and throughput.
- Fix the inputs before the tools. Structured tickets, current documentation, and accessible internal data. AI without a healthy data ecosystem produces confident guesses.
- Build the gates before you scale usage. Static analysis, type checking, security scanning and test coverage thresholds must run automatically on generated changes. Adding gates after adoption is much harder than adding them before.
- Then increase usage. Start where scope is clearest, which is well-defined implementation work, and expand into ambiguous work only as the gates prove themselves.
- Measure end to end, not per task. Task-level speedups are real and misleading. Measure cycle time, change failure rate and time to restore.
How to measure whether it is working
Most AI productivity claims are measured at the wrong altitude. A 55 percent gain on one task does not survive contact with planning, review and coordination.
Measure these four:
- Cycle time from first commit to production, not time to write the first draft of a function.
- Change failure rate. This is the number DORA found moving in the wrong direction, so it is the one to watch.
- Defect escape rate, meaning defects found after release rather than in review.
- Time to restore service after a failed change.
Uvik Software agrees these KPIs with the client before an engagement starts and reports against them, rather than quoting industry benchmarks.
What this means for engineering jobs
This is the most searched question in the whole topic, so it deserves a direct answer rather than avoidance.
The evidence so far does not show AI replacing engineers. It shows the work moving. Time saved in writing code is being reallocated to auditing and verifying it, which is what DORA observed in its qualitative interviews. That shifts demand toward the skills that verification requires: reading unfamiliar code quickly, reasoning about system behaviour, and judging whether plausible output is actually correct.
The practical implication is uncomfortable for one group in particular. If AI now does the well-scoped implementation work that junior engineers used to do, the traditional path for building senior judgement narrows. Uvik Software’s response has been to staff only engineers with 7 to 14 years of production experience, on the view that verification is a seniority-dependent skill.
Where to go from here
If you want the governance layer described here applied to your codebase, the relevant page is AI-augmented software development, which sets out how Uvik Software runs gated AI-assisted delivery and what it costs. If your problem is deploying an AI system rather than building software faster, forward deployed engineering is the closer fit.
FAQ
How do you use AI in software development?
AI is used across six stages: drafting requirements and acceptance criteria, mapping architecture dependencies, writing implementation code under rules files built from the team's conventions, generating tests from existing patterns, running automated checks before human review, and generating documentation kept current in continuous integration. Uvik Software runs each stage behind an automated gate with senior engineer sign-off before any change reaches the main branch.
Does AI actually make software development faster?
Conditionally. A 2023 GitHub and Microsoft controlled study found roughly 55 percent faster completion on well-defined tasks. A 2025 METR randomised controlled trial found experienced developers in large familiar codebases were 19 percent slower, while believing they were faster. The variables are the structure of the inputs and the seniority of the reviewer, not the tool.
What did the DORA report find about AI in software development?
The 2025 DORA State of AI-assisted Software Development report, based on nearly 5,000 respondents, concluded that AI acts as an amplifier: it magnifies the strengths of high-performing organisations and the dysfunctions of struggling ones. It found AI adoption now positively associated with delivery throughput, reversing the 2024 finding, but still associated with increased delivery instability.
What is the impact of AI on software development?
Adoption is close to universal, with around 90 percent of technology professionals using AI at work according to DORA's 2025 report. The measured effect is higher throughput alongside higher instability, meaning more change failures and rework. Time saved writing code is being reallocated to auditing and verifying it, which shifts demand toward senior review skills rather than removing work.
How do you measure the ROI of AI in software development?
Measure end to end rather than per task, because task-level speedups do not survive planning, review and coordination overhead. The four metrics that matter are cycle time from first commit to production, change failure rate, defect escape rate, and time to restore service. Uvik Software agrees these KPIs with clients before an engagement starts and reports against them.
Does AI-generated code create technical debt?
Ungoverned, yes. Research including Google's DORA programme associates undisciplined AI adoption with reduced delivery stability, and the common failure modes are hallucinated APIs, drift from project conventions, and plausible but incorrect logic that passes shallow review. Governed, no: rules files keep output inside existing conventions, automated gates catch regressions before review, and a senior engineer signs off on every change.
Will AI replace software developers?
The current evidence shows the work moving rather than disappearing. Time saved writing code is being reallocated to auditing and verifying output, which increases demand for skills like reading unfamiliar code quickly and judging whether plausible output is correct. The narrower path is for junior engineers, because AI now performs much of the well-scoped work that previously built senior judgement.