The deploy went out on a Thursday. Pipeline green. No errors. Canary rollout hit 100% by Friday morning. Nobody had written down what "this worked" would mean before it shipped - so nobody checked. Three months later, an engineer doing cleanup found it still running in production, untouched, quietly costing money nobody was measuring.

Here's the part that should bother you: the pipeline did its job perfectly. It shipped fast, shipped safely, shipped on schedule. The system that failed was the one nobody built - the one that's supposed to tell you, before you build the next thing, whether the last thing was worth building at all. Most teams don't have that system. They just have a faster and faster way of finding out three months too late.


The Metric That Lied

Deploy frequency answers one question, and one question only: how often does code reach production. It cannot tell you whether the code that reached production did anything worth the salary behind it. Two different questions. The industry spent a decade building world-class tooling for the first one and left the second to whoever remembered to ask it in a retro.

Google's own DORA research draws the line sharply: elite teams deploy on demand, multiple times a day. Low performers deploy less than once every six months. That gap - the difference between shipping today and shipping sometime this year - is real, and it's worth chasing. It is also, by itself, silent on whether anything you shipped was worth shipping. Speed is not the finish line. It was never supposed to be the finish line.

DORA tier definitions, Accelerate State of DevOps Report 2024 (dora.dev). Elite: on demand/multiple times per day. Low: fewer than once per six months. Values plotted are representative deploys-per-month midpoints for each tier, not exact reported figures. Source: Google Cloud DORA research.

The 2025 DORA report says it plainly: AI tooling now lets a developer ship code faster than any point in the industry's history - and that speed doesn't automatically make the company faster. It gets swallowed by every system downstream that wasn't built to move at the same pace. Feature validation is usually the first casualty. A team can hit elite numbers on every dashboard and still not be able to answer, three months later, the only question that ever mattered: did the last quarter's roadmap earn its keep.


Two Different Questions, One Broken Pipeline

Here's a number that should stop you cold. Ron Kohavi's experimentation research at Microsoft - run across Bing and dozens of other products, over years, at massive scale - found that only one idea in three actually improved the metric it was built to move. Two-thirds of the ideas they believed in going in did not. Not a junior team. Not a weak product. Microsoft's most experienced organization, testing ideas they already believed in, in a search market they'd been optimizing for over a decade.

If the best experimentation team in the industry is right about a feature mattering one time in three, the honest baseline for any team without a rigorous evaluation gate is worse - not better.

That's the whole argument, right there. Shipping velocity is an execution metric. It tells you whether your pipeline can move code from a branch to production, reliably, fast. Discovery is a decision-quality problem. It tells you whether the thing you moved was worth moving in the first place. A team can be world-class at the first and own zero mechanism for the second - and from the dashboard, both look identical. Every checkmark green. Every metric that matters, unmeasured.

Kohavi, Deng, Frasca, Walker, Xu, Pohlmann - Online Controlled Experiments at Large Scale (KDD 2013), Tenet 3: 'Only one third of the ideas tested at Microsoft improved the metric(s) they were designed to improve.'

The Staged-Rollout Gate, Borrowed From Somewhere Unexpected

Anthropic's Responsible Scaling Policy, version 3.0 as of February 2026, was built to answer a question with nothing to do with product features: at what point does a model's capability cross a line serious enough to demand a different level of safeguard before going any further. Forget the subject matter for a second. The mechanism is what's worth stealing. Define the threshold before you test. Evaluate against that threshold in stages, before wider deployment. Decide the response in advance - tighten the safeguard, or stop - instead of improvising once something already looks wrong.

Strip the safety language off that structure and you have a release-engineering discipline any team could run starting Monday.Decide the user-behavior threshold a feature has to clear before it earns another sprint of investment - before it ships. Not "no errors in production." A number. Activation in a cohort. Week-two retention. Something someone actually wrote down. Ship it to a small group with a fixed decision date already on the calendar- not "we'll keep an eye on it," a date. And decide, in advance, what happens if the number doesn't show up: a predefined stop rule that reclaims the engineering time, so "this isn't working" is a decision you already made, not a fight that breaks out in a roadmap review three months from now, after everyone's gotten attached to it.

This is not a frontier-lab luxury. Netflix has run exactly this discipline for two decades - nearly every product change, however small, goes through controlled testing before it becomes the default experience for its subscriber base, because the company learned the hard way that intuition about what people want is wrong often enough to be dangerous on its own. And the gate has an upstream partner at Amazon: Working Backwards forces a team to write the press release for a feature - who it's for, what problem it solves, why anyone would care - before a single line of code exists. Same discipline, one step earlier. Define what "worked" means before you build. Not just before you scale.

yes

no

Write the threshold
before the feature ships

Ship to a small cohort
fixed decision date set

Cleared the threshold?

Expand the rollout

Reclaim the engineering time
decision rule, not a debate

The staged-rollout gate: the same shape as Anthropic's capability-threshold evaluation process (Responsible Scaling Policy v3.0), re-pointed at user behavior instead of model safety.

What It Costs You Not to Have This

Stripe's Developer Coefficient survey found the average developer spends 13.5 hours a week on technical debt, and another 3.8 hours fixing "bad code" - work that shouldn't have needed fixing. 17.3 hours a week. 42% of the job. Spent servicing the past instead of building the future. Not all of that traces back to unvalidated features. Enough of it does: a feature that ships without a threshold doesn't fail quietly and disappear. It stays. Still running. Still calling APIs. Still sitting in the codebase every engineer has to read and reason about. Still paging someone at 2 a.m. for the four people who use it.

The exact scale is debated. The direction is not. The Standish Group's famous 64% figure - features rarely or never used - traces back to a 2002 keynote built on four internal applications. A tiny sample, treated as gospel for two decades. Pendo's 2019 survey, with a far broader base of 615 subscriptions, landed even higher: 80%. Neither number is precise. Both point the same direction: a huge share of what gets built, ships, and stays in production was never checked against a threshold that would have told anyone to stop.

A feature nobody validated doesn't cost you the sprint it took to build. It costs you every sprint after - in maintenance, in cognitive load, in the 2 a.m. page nobody saw coming for a feature nobody uses.

Standish Group figure originates from a 2002 XP conference keynote based on four internal enterprise applications - a small, dated sample cited widely regardless. Pendo's figure comes from its 2019 Feature Adoption Report, based on 615 Pendo subscriptions. Presented together as directional evidence, not a precise consensus number.
Stripe, The Developer Coefficient (September 2018), surveying developers and executives across six countries on how the working week is spent. Source: stripe.com/files/reports/the-developer-coefficient.pdf.

Building the Gate Without Slowing Down

Most teams already own the hammer. LaunchDarkly and every serious feature-flag platform ship with kill-switch flags as a core primitive - a change propagates in about 200 milliseconds. The technical distance between "this isn't clearing the bar" and "this is off" is close to zero. The gap was never the tooling. It's that almost nobody writes the bar down before the feature ships, so there's nothing for that kill switch to be measured against later. It sits there. Fully capable. Unused. For the exact same reason the feature itself went unvalidated.

Google's own public record hands you a clean, official example of what happens without that bar set early. Stadia launched in November 2019 on what Google itself called a strong technical foundation. It ran for nearly three years before Phil Harrison, the general manager, wrote the shutdown announcement in September 2022: "it hasn't gained the traction with users that we expected." Read that sentence again. That is the threshold that should have existed on day one. It arrived three years and an uncounted amount of engineering investment too late. Nobody at Google sat down and decided to run Stadia for three years with no stop condition. Nobody had to. The absence of one wasn't a decision. It was the default. The same default every unvalidated feature ships under, at every company, every week.

Fixing it costs you a page, not a platform. Before a feature ships: name the one metric that defines "worked." Name the cohort it ships to first. Put a decision date on the calendar that isn't "eventually." Write down, today, what happens on that date if the number isn't there - expand, or reclaim the time and move on. None of this slows the deploy down. It runs in parallel with the pipeline you already built. What it changes is everything that happens after: whether "did this matter" is a question somebody has to remember to ask, or a decision you already made before the code ever shipped.

Deploy frequency was never the achievement. It never will be. The achievement is knowing, inside a fixed number of weeks and without a political fight, which of the last ten shipped features earned the next sprint - and which one should have been stopped in week two, before it became a line in next year's technical debt survey. Speed without a threshold isn't discipline. It's just a faster way to find out you were wrong.


Sources

  1. Kohavi, Deng, Frasca, Walker, Xu, Pohlmann - Online Controlled Experiments at Large Scale (KDD 2013) - Tenet 3: only one third of ideas tested at Microsoft improved the metric they were designed to improve.
  2. Anthropic - Responsible Scaling Policy v3.0 (February 2026) - the capability-threshold, staged-evaluation, predefined-response structure this article repurposes for feature validation.
  3. DORA / Google Cloud - Accelerate State of DevOps Report 2024 - deploy-frequency tier definitions for elite and low performers.
  4. DORA / Google Cloud - State of AI-assisted Software Development 2025 - finding that local speed gains from AI tooling don't propagate to organizational performance without systemic practices around them.
  5. Netflix Technology Blog - It's All A/Bout Testing: The Netflix Experimentation Platform - Netflix's decades-long culture of staged, controlled evaluation before any product change becomes the default experience.
  6. Working Backwards - The Amazon Working Backwards PR/FAQ Process - Amazon's practice of defining what a feature must achieve before any code is written.
  7. Mountain Goat Software - Are 64% of Features Really Rarely or Never Used? - traces the widely-cited Standish Group figure to its 2002 origin and small sample size.
  8. Pendo - The 2019 Feature Adoption Report - 80% of features rarely or never used, based on 615 Pendo subscriptions.
  9. Stripe - The Developer Coefficient (September 2018) - developers spend 42% of their working week, 17.3 hours, on technical debt and bad code.
  10. LaunchDarkly - Kill Switch Flags Documentation - the sub-200ms flag-propagation mechanism most CD stacks already own.
  11. Google - A Message About Stadia and Our Long Term Streaming Strategy (September 29, 2022) - Phil Harrison's official statement confirming Stadia's shutdown after nearly three years without hitting expected user traction.