The Software GardenThree shapes ← Contents
The Software Garden · Case studies · 22

Three shapes

Engineer A is the subject of the Cambrian explosion. Then we found two more Camunda engineers who got there on their own. Nobody taught them this approach: we found them when we started looking at how to expand it across the organisation, and each had taken a different path.

3engineers, independently
1,900PRs in five weeks, behind a fence
9 → 34merged PRs a month through a human gate
scroll ↓
Engineer B

A product in five weeks, inside a fence.

Engineer B works on the SaaS console and its operations tooling, and went agentic independently of Engineer A. Before agents, B already shipped in small, fast steps: about 34 pull requests a month, a median of 33 changed lines, nearly all approved by a colleague.

From late 2025 the rate tripled, to about 100 a month, and the pull requests grew to a median of 76 lines. Colleagues still approved 94% of them.

Then B ran an experiment: build a whole product from a written plan, in one go, in a private sandbox repository. One of the first pull requests added the CI gates. After that, every pull request carries a task ID from the plan, and each one merged through those gates.

The fence mattered. No person reviewed the sandbox, but in the same months B’s work in shared repositories was still 75% approved by a colleague. Zero eyes where the blast radius is contained; human review where it is not.

34 PRs a monthMedian 33 lines. 86% approved by a colleague, merged in about 20 minutes.
3× the rateAbout 100 PRs a month, median 76 lines, 94% approved by a colleague.
New repositoriesAgents for business processes, and internal tools. AI reviewers take on first-pass review: 500+ reviews in six months.
The one-shot experimentCI gates first, then the plan. 1,912 PRs in five weeks, 97% merged, median 356 lines, median 42 minutes from open to merge. No human review, by design.
Back to shared workA chat-ops bot for cluster status, built the same way.
Engineer C

Each PR waits longer. More of them get through.

Engineer C maintains a deployment repository that many teams depend on, and went agentic independently too. Every change there is reviewed by another maintainer, and nobody wanted to change that.

From April 2026 C went agentic. C’s pull requests in that repository went from 10 a month to 47, and they got bigger. The review rule held: colleagues approved 98% of them.

The median time from open to merge went from 11 hours to six days. That looks like a slowdown. It isn’t: merged pull requests went from 9 a month to 34. Time to merge measures how long one change waits. Throughput measures how much gets done.

The reviewers scaled too. Human reviews of C’s pull requests went from 14 a month to 69, five times as many. The queue of open pull requests grew from a handful to between 10 and 30, and it drains: it does not grow month on month. That is a longer queue, not a backlog.

The wait has three parts. A first review now comes after about a day instead of a few hours, because reviewers batch their work. Most changes now get a round of comments. And after approval, a change waits about 19 hours instead of 2 for CI and the merge queue. More pull requests were also closed without merging, as approaches were tried and dropped.

The risk is concentration: two reviewers do most of the reviews. C’s answer was to work on the gate, not around it. C reviews as much as C writes, and built tools for the queue: a multi-agent PR reviewer with domain checks, a test bed for merge-queue races, and a CLI for running agents across many repositories.

10 → 47PRs a month in the shared repository
73 → 185median changed lines per PR
11 h → 6 dmedian time from open to merge
9 → 34merged PRs a month
14 → 69human reviews a month; 98% still approved by a colleague
Three engineers

Three engineers, independently. Three different shapes.

None of them copied the others. Each went agentic on their own, with their own tools, in a different setting, and the setting decided where the speed went. Even so, all three ended up putting agent reviewers in front of the merge, each with their own setup.

A · DeriveB · FenceC · Gate
SettingSDKs and tools: one owner before, a pod of three afterProduct team; a private sandboxA repository many teams depend on
PRs a month, before → after11 → 9534 → 100, and 1,900 in five weeks in the sandbox18 → 75
Median PR size114 → 285 lines33 → 317 lines57 → 126 lines
Approved by a colleagueRarely, before and after. Before: one owner. After: the tests and the agent loop are the gateMostly in shared repos; never in the sandboxAlways, before and after
Median time to mergeUnder an hourUnder an hour; up to 2 hours in shared repos11 hours → 3–6 days, while merged PRs a month went up almost 4×
Where the speed wentInto new repositories, languages and peopleInto a whole product, fenced offInto throughput, paid for with a longer wait per change, and into tools for the review queue

Source for this section: pull requests in Camunda’s GitHub organisation by each engineer. “Before” is May 2024 – April 2025 for A and B, and May 2025 – March 2026 for C, who went agentic later. “After” is May – October 2026 for A and B (B without the sandbox), and April – September 2026 for C. Line counts here include generated files. AI reviewers and bots do not count as a colleague. Direct commits without a pull request, and work outside the organisation, are not included. Snapshot taken November 2026.

Who decides a change is done?

An agent loop, a human signature, or a human review.

All three engineers use agent reviewers. What differs is who decides that a change is finished. That explains the different times to merge.

A · The loop decidesAgent reviewers and the coding agent loop until the findings converge: a median of 2 review rounds, and a quarter of PRs take 4 or more. 90% of merged PRs show the loop, and 80% merged with no human review at all. The tests and the loop are the gate. An automatic approver runs in shadow mode beside it. Time to merge: under an hour.
B · The loop decides, a human signsThe same pattern: 91% of PRs show an agent loop, with agent verdicts posted as structured comments. A colleague approves 77% of PRs, but 94% of those approvals carry no comment, and they arrive within an hour of the last agent round. The signature is a formality. Time to merge: under two hours.
C · The human decidesAgents do one first pass on 60% of PRs. Then a colleague reviews for real: on half the PRs they comment or ask for changes, and they approve about a day after the last agent round. The human queue sets the pace. Time to merge: days.

None of these is wrong. Where a change can break other teams, C’s gate buys safety with time. Where the loop is trusted, a human signature costs little, and it adds little. The choice should be deliberate, per repository.

Source: merged pull requests in Camunda’s GitHub organisation, May – October 2026 (C from April). An agent round is a review by an AI reviewer, or a comment that an agent posted: a verdict, a review report or an “addressed in <commit>” reply. Loops that ran before the PR was opened are not visible, so these numbers undercount them. A comment-free approval can still follow a careful read; the short gap after the last agent round is the stronger signal.

So

All three got faster. What they built around the agents decided where that speed went.

Engineer A derived everything from a hardened spec and let the loop decide. Engineer B put the gates in first and fenced the experiment off, so it could run with zero eyes. Engineer C kept the human gate on shared code. Each change waited longer, but the reviewers scaled with the volume, so the queue grew without becoming a backlog, and C started building tools for the gate.