Skip to main content
Back to blog

Zero Errors Was the Spec

7 min read

The most important number I ever shipped wasn't a feature count or a velocity chart. It was zero.

At AArete, I orchestrated a multi-state Go Live for a Salesforce-integrated insurance portal. It went live with zero errors and held 98% success over the six months that followed. I lead with that number not because it's a bragging right, but because of what it taught me about the actual job — a lesson that turned out to transfer, almost line for line, into how I build autonomous AI systems today.

In enterprise delivery, the launch is the proof. There's no soft open, no "we'll patch it next sprint" when real members in multiple states are trying to access their insurance on day one. A launch that breaks is a strategy that failed — full stop. Which means "prove it works" was never a motivational slogan to me. It was the spec. Zero errors wasn't an aspiration we hoped to hit. It was the requirement the whole program was built backward from.

I want to walk through the discipline that produces a number like that, because it's the same discipline I now point at AI systems that have to be right by morning with no one watching.

The Launch Is the Proof

Start with the stance, because everything else follows from it.

In a lot of software cultures, the launch is the beginning of finding out whether it works. You ship, you watch the dashboards, you fix what breaks. That's a legitimate model for some products. It is not a legitimate model for a multi-state insurance portal, a national healthcare platform, or a union's membership system serving its entire base — and across my delivery career, those were the stakes. When the platform going live is also the moment of truth, you cannot treat the launch as a discovery process. The discovery has to be done before the launch. The launch can only be allowed to confirm what you already proved.

That reframe changes how you work backward. If the launch is the proof, then every step before it exists to retire risk, not to add scope. You're not building toward a feature-complete date; you're building toward a defensible one — a date where you can stand in front of executive leadership and union officials and say "this will hold," and mean it, because you've already removed the ways it could fail.

Grooming Is Risk Removal, Not Housekeeping

The least glamorous discipline is the one that did the most work: backlog grooming.

On the healthcare redesign where I led a six-person UX team, disciplined grooming plus client QA cut post-launch defects by 30%. That number didn't come from working harder during the build. It came from being relentless before the build about what was actually in scope, what was actually defined, and what was secretly ambiguous and pretending to be ready.

A messy backlog is unremoved risk wearing a costume. Every vague ticket is a defect you haven't met yet. Grooming, done seriously, is the act of dragging that ambiguity into the light early — when it costs a conversation — instead of meeting it at launch, when it costs the launch. I came to treat grooming not as housekeeping but as the primary place defects are prevented. You don't catch most bugs in QA. You prevent them in grooming, by refusing to let underspecified work into the build in the first place.

QA Is Not a Phase You Add at the End

The second discipline is QA, and the key word is client QA.

It's not enough to verify the thing against your own understanding of what it should do, because your understanding is exactly what might be wrong. The portal had to be QA'd against what the client actually needed it to do, in the real conditions it would face across multiple states. That's the difference between "it passes our tests" and "it works." Your tests prove your assumptions are internally consistent. Only the client's reality proves your assumptions were right.

So QA wasn't a phase bolted on at the end of those programs. It was a continuous reconciliation between what we built and what reality required — and the closer that reconciliation ran to the real launch conditions, the fewer surprises the launch held.

Reversibility and No-Surprises Comms

Two more principles round out the discipline, and they're the ones that let you sleep the night before a go-live.

Reversibility. You plan the rollback before you need it. A zero-error launch isn't a launch where nothing could ever go wrong — that's not a thing you can promise about reality. It's a launch where you've thought hard enough about what could go wrong that you have a path back from every one of them. Phased rollouts, staged exposure, a known way to undo. Confidence at the launch comes from having pre-built the escape from every failure you could imagine.

No-surprises stakeholder communication. Reporting to executives and union officials with weekly milestone briefings and risk assessments wasn't ceremony. It meant that by the time we launched, nobody was surprised by anything — not the risks, not the mitigations, not the state of readiness. Surprise is the enemy of trust, and trust is what lets a high-stakes launch actually happen on schedule. The briefings existed so the launch would be the most boring, most expected event in the program. Boring is the goal. Boring is what zero errors feels like from the outside.

The Same Spec, Pointed at AI

Here's why I'm telling a Salesforce story on a page about building AI.

These days I build autonomous systems — an agent runtime where dozens of workers run an overnight chain while I'm asleep. And the bar is identical to the insurance portal. The chain has to be right by morning, and there's no one watching it run. That's a go-live every single night. There's no soft open for an overnight DAG; either the results are correct and waiting when I wake up, or the strategy failed in the dark.

So I point the exact same discipline at it. Grooming becomes ruthless clarity about each worker's contract before I let it into the chain — unremoved ambiguity is unremoved risk, same as a vague ticket. QA becomes smoke-testing against real inputs and real outputs, not mocks, because "it passes our tests" still isn't "it works." Reversibility becomes coordination locks and a known-good state I can fall back to when a worker misbehaves. No-surprises comms becomes systems that report their own state loudly, so the failure is visible and expected rather than discovered. Different medium, same spec: prove it works, before it matters, with a path back from every way it could break.

That's the throughline of my whole career, from a zero-error multi-state launch to an overnight chain that has to be right by morning. The launch is the proof. "Prove it works" isn't a slogan — it's the spec, whether the thing going live is an insurance portal in five states or an autonomous system running while no one watches.

If you're hiring for someone who treats every launch — human or autonomous — as the proof, I'm at reed@grainlabs.io.