0% read on this device
Browse the curriculum

Start Here

Vision

First Principles

Operating Model

Domain Model

Agent Factory

Runtime Architecture

AI Engineering

Autonomous Workflows

Verification & Delivery

Factory Platform

Quality Engineering

Security & Governance

Case Studies

Labs

Interview Practice

Research Journal

Reference

Curriculum/Interview Practice/Complete source chapter
Interview Practice7 min readinterview

Executive and Interview Mastery

Technical knowledge is not mastery until it can be reconstructed, defended, and adapted under questioning. Executives need the business case and risk model. Architects need boundaries and invariants. Engineers need implementation and failur

Status: Draft for studyRisk: variableLifecycle: learnContent reviewed 2026-08-25Maturity guide →
Claim boundaryThis is curriculum guidance. It does not by itself prove a production implementation.
Whiteboard exercise

Reconstruct and defend this chapter’s architecture.

Reconstruct the architecture, name each boundary, and defend the tradeoffs.

explanation7 min chapter
Open the source exercise

In 20 minutes, draw the complete operating model from business intent to validated customer value. Spend five minutes on the happy path, five on authority and evidence, five on failure and recovery, and five on economics and adoption. Then erase the vendor names and prove the architecture still works.

1. The problem

Technical knowledge is not mastery until it can be reconstructed, defended, and adapted under questioning. Executives need the business case and risk model. Architects need boundaries and invariants. Engineers need implementation and failure behavior. A single memorized pitch fails all three audiences.

2. Why the problem exists

AI discussions invite vague claims. Terms such as agent, autonomy, factory, trust, and learning are used inconsistently. Interviewers test whether a leader can separate vision from implementation, respond to skepticism, quantify value, and make a hard tradeoff without hiding behind jargon.

3. Enduring Principle

Explain from one stable thesis

An AI Software Factory is a governed engineering operating model where humans define intent, constraints, priorities, and acceptable risk while autonomous agents plan, implement, validate, document, and improve software. Humans retain accountability. Agents provide execution. The goal is to reduce the time from business intent to validated customer value while improving quality, governance, and engineering leverage.

The supporting thesis is: trust the system, not the model. The factory assumes models will fail and uses bounded authority, independent validation, evidence, policy, audit, recovery, and human decisions to make execution safe.

Use audience-scaled explanations

Thirty seconds — CEO:

An AI Software Factory turns a governed business objective into validated software through bounded agent execution. It is more than an AI coding tool: it controls planning, authorization, quality evidence, delivery, and learning. Humans remain accountable for risk. Success means faster validated customer value, stable or lower failure, and greater engineering leverage.

Two minutes — CTO:

Start with a Mission containing outcome, constraints, acceptance criteria, risk, and owner. Agents propose a versioned Plan; a human approves the relevant version. The factory converts that authority into WorkOrders and Tasks. Each Attempt runs with frozen policy, tools, context, repository scope, budget, and identity. Independent validators attach evidence to criteria. The control plane then presents a review-ready PR with exact lineage. Deployment may be performed by existing CI/CD, but the factory governs policy, evidence, approval, and production validation. Autonomy rises only after sustained outcomes and falls when trust degrades.

Ten minutes — architecture:

Whiteboard company and repository scope, Mission through release hierarchy, control and execution planes, policy evaluation, versioned Factory Configuration, Task/Attempt state, lease and idempotency, worktree isolation, agent/tool/context manifest, independent validation, evidence lineage, GitHub boundary, production feedback, metrics, and trust calibration. For each arrow, name the authoritative record, principal, invariant, failure, and recovery.

Distinguish adjacent systems

SystemPrimary valueMissing factory responsibility
Coding assistantSuggests code in a human sessionDurable workflow and governed lifecycle
AI agentPursues a bounded objective with toolsOrganization-wide authority and outcome model
Agent platformRuns and observes agentsEngineering-specific intent-to-production governance
AI Software FactoryGoverns the full lifecycle to validated customer valueMust prove, not merely claim, every stage

Answer objections through architecture

“Models are probabilistic. Why trust them?” Do not trust model confidence. Trust a system that limits authority, validates independently, retains evidence, and fails safely.

“Isn’t this just CI/CD plus agents?” CI/CD executes build and delivery steps. The factory begins at governed business intent and owns planning, authorization, agent execution, evidence-based acceptance, deployment governance, production feedback, and controlled learning.

“Won’t governance remove the speed?” Poor governance does. Risk-based policy automates routine decisions and escalates only surprises. Evidence packages reduce review reconstruction.

“Why not wait for better models?” Better models improve a component. They do not create identity, policy, isolation, audit, independent evidence, or organizational accountability.

“Will this replace engineers?” It changes the unit of work and raises the importance of intent, architecture, quality systems, product judgment, and governance. Workforce effects are real, but a credible leader does not promise a fixed outcome from immature evidence.

Structure architecture answers

Use this sequence under pressure:

  1. Clarify outcome, actors, scale, risk, and non-goals.
  2. Define the authoritative domain hierarchy.
  3. Draw control and execution planes.
  4. Resolve identity, policy, and authorization before execution.
  5. Explain durable state, Attempts, idempotency, and recovery.
  6. Establish independent validation and evidence lineage.
  7. Close the loop through delivery, production outcome, and metrics.
  8. State tradeoffs, current limitations, and staged adoption.

Handle reliability and security incidents consistently

Use one operating sequence under pressure:

Clarify → Contain → Observe → Isolate → Restore → Correct → Prevent → Measure

Clarify the affected builders, workflows, tenants, repositories, data, and business impact. Contain unsafe execution with scoped cancellation, authority reduction, credential revocation, or a kill switch. Preserve traces, events, tool calls, policy decisions, artifacts, and evidence. Isolate the failure to intent, context, model, tool, state, policy, or evaluation. Restore a known-safe version, correct and reconcile the defect, add a regression evaluation and stronger control, then measure the affected cohort until confidence returns.

Practice the sequence against production-agent failure, reliability or evaluation regression, model degradation or provider outage, tool misuse, prompt injection, malicious repository content, secret exfiltration, MCP poisoning, privilege escalation, unauthorized file or data access, sandbox escape, approval bypass, supply-chain compromise, cross-tenant leakage, failed deployment, and runaway token spend.

The governing security thesis is: an agent should receive the minimum context, tools, permissions, time, and budget required for the task—and every consequential action should produce evidence.

Lead adoption through progressive proof

A serious adoption begins with one controlled repository and one Governed Issue → Validated Pull Request path. Establish baselines, keep human merge authority, classify risk, measure review burden and failure, and increase autonomy only after sustained evidence. Scale a proven operating model, not a demo.

4. Tradeoffs and alternatives

Strong opinions demonstrate judgment, but dogma signals shallow understanding. State the default, the conditions that justify it, and when another design is better. Do not use Mission Control’s stack as the universal definition of a factory.

Memorized answers are useful scaffolding but fail under follow-up. Practice causal chains: why the problem exists, which invariant matters, what the design costs, how it fails, and what evidence changes your mind.

5. Current Mission Control Implementation

Mission Control at commit b31e27564deb1c03c167e61b5ee094567c2ba7b1 is a living case study, not a completed factory.

It has the Mission/Plan/WorkOrder/Task/Attempt hierarchy, versioned Factory Configuration and readiness, policy and approval primitives, WorkflowRuns and events, independent evidence concepts, scoped context packages, service and GitHub identity contracts, operational analytics, and a browser-proven control-plane path through WorkOrder release.

It has not yet proven the complete browser-operated real Codex-to-GitHub path. The retained run stopped because no active Governance Policy and Factory Configuration existed, the GitHub App was not configured, todo 024 was incomplete, and the runtime was dirty. Trust Score, automatic autonomy calibration, first-class Risk Review, governed MCP, production memory, complete deployment governance, and intent-to-customer-value economics remain partial or future.

The strongest interview posture is to explain both the implemented foundation and the unproven boundary without embarrassment. Accurate limitation is an architecture skill.

6. Future Vision

The mastery guide should accumulate accepted lab evidence, recorded whiteboards, timed explanations, objection drills, and post-interview retrospectives. A claim graduates only when it can be traced, operated, broken, recovered, and taught without agent assistance.

7. Versioned references

8. Notes and lessons learned

The most defensible differentiation is not “our agents are smarter.” It is that the operating system makes probabilistic execution governable. The hardest executive discipline is refusing to convert a roadmap into a present-tense claim.

9. Interview and discussion questions

Executive

  1. Why now, and what evidence would cause you to slow adoption?
  2. How does the factory change engineering economics and organization design?
  3. Which risks always remain human-owned?
  4. What does a 90-day proving program need to demonstrate?

Architecture

  1. Design the factory for 100 repositories and several risk tiers.
  2. How do you prevent duplicate effects after a worker crash?
  3. How do policy, identity, context, validation, and trust interact?
  4. What is the minimum independent-validation boundary?

Adversarial

  1. Your change failure rate rose while lead time fell. What do you do?
  2. A security validator fails while two other validators pass. What happens?
  3. An agent created a correct PR outside its WorkOrder scope. Is it acceptable?
  4. A board member asks for a headcount reduction forecast. How do you answer?

10. Whiteboard exercise

In 20 minutes, draw the complete operating model from business intent to validated customer value. Spend five minutes on the happy path, five on authority and evidence, five on failure and recovery, and five on economics and adoption. Then erase the vendor names and prove the architecture still works.

11. Hands-on lab

Record three explanations—30 seconds, two minutes, and ten minutes—without notes. Then complete a 45-minute mock CTO system-design interview and a 20-minute skeptical CEO discussion. A reviewer should score conceptual accuracy, causal reasoning, evidence boundaries, tradeoffs, audience fit, and clarity.

Pass only when you can connect every major claim to an enduring principle, Mission Control implementation evidence, or an explicitly labeled future vision. Agent-generated answers may support preparation but cannot be used during the mastery assessment.

External review

Review this chapter.

Challenge a claim, boundary, missing failure mode, unclear term, or unsupported evidence statement.

  • Claim
  • Boundary
  • Failure
  • Evidence