WaveMaker’s Agentic App Generation System: Interview With Head Of Product Experience Vikram Srivats

WaveMaker is an architecture-first, agentic AI-based web and mobile application generation system for early developer teams in enterprises and midmarket businesses. As Head of Product Experience, Vikram Srivats is responsible for all aspects of product-market fit, including driving go-to-market (GTM) strategy. Pulse 2.0 interviewed Vikram Srivats for this article.

Vikram Srivats’ Background

Could you tell me more about your background? Srivats said:

“I’m a Mechanical engineer by training with a graduate degree from India’s top science university, the Indian Institute of Science, who somehow ended up in the fascinating intersection of hi-tech and software products with enterprise customers since I started over 20 years ago.”

“My career has followed a pattern: I keep finding myself at the early stage of hard technology problems where the product-market fit isn’t obvious yet, and the job is to figure out what matters to customers, build the narrative, and scale it. At Mindtree, a $3 billion revenue company today, I was the founding general manager of an Internet of Things business that I incubated from scratch. Before that, I took over a brilliant team and an R&D lab and helped establish it as the number-one independent licensor of Bluetooth Smart silicon and software IP globally. Earlier in my career, I shaped the enterprise go-to-market for what was arguably India’s first indigenous handheld computer, a product built to address the digital divide.”

“I’m genuinely moved by making possibilities real and have always been drawn to the moment when a product or technology goes from being technically impressive to being genuinely useful to a business. That’s what drew me to WaveMaker. When I joined, the company had a deeply sound technical foundation, a decade of deterministic code generation, enterprise-grade architecture, and zero lock-in, but the world didn’t yet fully appreciate why that mattered. Then AI changed everything, and suddenly, the case for determinism became the most important conversation in enterprise software. I’ve held several roles at WaveMaker, including VP of Strategic Markets, making deep inroads in the world of financial services and software. Today, as Head of Agentic Product Experience, I’m responsible for the end-to-end product experience of our agentic application generation platform from how customers first encounter WaveMaker to how their development teams use it daily to ship production software.”

“I also write regularly on Substack about the themes I care about: why deterministic software engineering is making a comeback, why design quality matters more (not less) in the AI era, and how enterprise development teams can navigate the hype cycle without losing their footing.”

 

Formation Of The Company

How did the idea for the company come together? Srivats shared:

“WaveMaker’s story starts with Pramati (meaning ‘exceptional minds’), our parent company, which was founded in 1998 by Jay and Vijay Pullur in Hyderabad. Pramati built the world’s first J2EE-certified application server, competing directly against Oracle, BEA, and IBM, and winning. By 2001, every one of India’s top ten banks ran on Pramati infrastructure. That’s the DNA: enterprise-grade platform technology built under intense competitive pressure.”

“In 2013, Pramati acquired the WaveMaker product from VMware and set out to solve a problem the team had experienced firsthand: enterprise application development was too slow, too expensive, and too dependent on scarce full-stack talent. But every platform that promised acceleration imposed proprietary lock-in that professional developers couldn’t accept.”

“The founding bet was radical for the low-code market at the time: generate standard open-source framework code, Java, Angular, Spring, with absolutely zero proprietary runtime. Customers would own their code completely and could walk away at any time. That decision meant WaveMaker couldn’t compete on the same “magic” promises as platforms that locked customers in. It was the harder path. But it built something more durable: trust from enterprise engineering teams who had been burned by vendor lock-in before.”

 

Favorite Memory

What has been your favorite memory working for the company so far? Srivats reflected:

“There’s a moment I keep coming back to. It was during a proof-of-concept with a large financial services company who had evaluated 17 different platforms across 30 criteria before even talking to us seriously. They were rigorous, skeptical, and had very specific requirements: on-premise deployment, Sybase database connectivity, AG-Grid and Highcharts integration, role-based access control. The kind of list that most demo-friendly platforms quietly fail on.”
“Our team ran a multi-phase evaluation with their engineers. At the end, their MD did the math: 4x FTE leverage during the PoC. But what stuck with me wasn’t the number. It was something one of their engineers said after the evaluation: ‘WaveMaker checked most of the boxes, and we actually trust the code it produces.’ That word “trust” from a professional developer evaluating the output of a platform, is the highest compliment this kind of product can receive. It validated everything we’d built.”

What are the company’s core products and features? Srivats explained:

“WaveMaker’s Agentic Application Generation Platform is built for enterprise developer teams shipping production-grade web and native mobile applications. The core innovation is a two-pass architecture that separates what AI is great at from what AI is terrible at.”

“In the first pass, AI agents, constrained by a Model Context Protocol trained on a decade of production application patterns, convert design intent into WaveMaker Markup Language, or WML. This is a compact, structured, language-agnostic intermediate representation. In the second pass, a proven template-based code generator converts WML into production-ready code: Angular, React, or React Native on the frontend, Spring and Hibernate on the backend. Same input, same output, every time. No hallucinations, no phantom dependencies.”

“Around that core architecture, we deliver: Design-to-Code agent, a Figma plugin for design-to-code conversion with full design token propagation; a rich enterprise UI component library built on Material 3; a visual WYSIWYG Studio where developers can toggle between agent mode, visual mode, and code editor mode; built-in security configuration covering RBAC, SSO, OAuth, and MFA; API integration via Open API and Swagger; and native Git and CI/CD pipeline support. The generated code is standard open-source frameworks that are downloadable, deployable anywhere, with zero runtime lock-in.”

 

Challenges Faced

Have you faced any challenges in your sector recently? Srivats acknowledged:

“The biggest challenge has been navigating the gap between AI coding hype and enterprise reality. The market narrative in 2024-25 was intoxicating: AI will write all the software, everyone becomes a programmer, development costs drop to near zero. That narrative attracted enormous venture funding and media attention to tools like Cursor, Copilot, Replit, and v0.”
“But enterprise teams who adopted these tools encountered a set of problems the hype cycle glossed over. AI-generated code introduces 1.7 times more issues than human-written code. Security flaws appear in 45% of AI output. 67% of developers report spending more time debugging AI-generated code than writing it themselves. Google’s own DORA report showed a 7.2% drop in delivery stability among teams using AI tools.”

“For WaveMaker, the challenge was positioning ourselves in a market where “AI coding” had become synonymous with raw, non-deterministic code generation when our approach was architecturally different. We had to educate the market that speed without reliability isn’t acceleration, it’s chaos with better marketing. The two-pass architecture, the constrained markup layer, the deterministic second pass, these are the concepts that required explanation in a world conditioned to judge AI tools by how fast they produced code. We overcame it by leaning into thought leadership, publishing research, and letting architecture speak for itself in customer evaluations.”

 

Evolution Of The Company’s Technology

How has the company’s technology evolved since launching? Srivats noted:

“WaveMaker started as a WYSIWYG, open-standards development studio, which is essentially a visual IDE that generated real Java and Angular code instead of proprietary artifacts. That was already differentiated in the low-code market, but it was fundamentally a visual development tool.”

“The first major evolution was adding a native mobile application studio. We delivered a React Native code generation engine for our enterprise customers and software companies who wanted to deliver a cross-platform companion or deskless high-fidelity application to their users or customers. The second was the composable architecture, enabling teams to build reusable components and assemble enterprise applications from modular building blocks, including supporting micro-frontend patterns.”

“The most consequential evolution came in 2025-26 with the introduction of AI agents and the two-pass architecture. Rather than adding AI as a chatbot sidebar, which is what most platforms did, we rearchitected the generation pipeline. We leaned in on our WaveMaker Markup Language (WML) as an intermediate representation, constrained AI through MCP, and kept the deterministic code generator as the final pass. This wasn’t an incremental feature; it was a fundamental architectural decision that redefined what the platform is: from a visual development studio to an agentic application generation platform. The Figma-to-app pipeline, the agent framework for custom domain-specific agents, and the style workspace for design system management were all built on top of this new architecture.”

 

Significant Milestones

What have been some of the company’s most significant milestones? Srivats cited:

“Several milestones stand out across our history. In 2014, we launched WaveMaker Online as one of the first cloud-based developer studios using Docker container orchestration provisioning developer workspaces in seconds, which was pioneering at the time. Building a customer base across 17 countries with enterprise clients like FICO, FIS, and AT&T validated that professional developers would adopt a platform that respected their code ownership. In 2023, WaveMaker was recognized by five industry analysts in a single year, including a position in the Omdia Universe for No Code/Low Code Solutions. In February 2025, we launched our AI-powered Figma-to-code plugin. In February 2026, we officially entered the agentic era with the launch of the two-pass architecture and the full agentic platform. That same month, our WaveXD 5G-integrated application marketplace won the Juniper Research Future Digital Award for Telco Innovation. And our collaboration with AT&T on mobile application experiences for influencer MVNOs opened an entirely new market vertical. Today, applications built using WaveMaker’s platform are shipping to millions of end users and consumers in the U.S. and globally.”

 

Customer Success Stories

Can you share any specific customer success stories? Srivats highlighted:

“For some of our customers who are large US public corporations in financial services and telecommunications, delivering to their exacting requirements around integration, UX, performance, security, and architectural governance in themselves has been a tremendous success. In a particular case, WaveMaker’s powered a mobile-first digital banking platform that is being used by millions of consumers with very high app store ratings. That is what we mean by enterprise-grade and consumer-scale, especially in these regulated industries where the code quality, security posture, and architectural consistency of generated applications isn’t optional, it’s audited.”

“We have helped Indonesia’s state owned petrochemical company completely rearchitect and migrate from over a 100 legacy Lotus Notes applications to a modern, rationalized Java/Angular based application stack within months. Belgium’s largest supermarket retailer, Colruyt Group, uses WaveMaker as a standardized accelerator for early developer teams, delivering architecture and guardrails out of the box. Blue Yonder, a global supply chain software leader, uses WaveMaker to support extensibility in areas of their supply chain solutions. These relationships span years, not quarters, which is the real test of an enterprise platform. Our enterprise customer base has experienced minimal churn which tells you more about product-market fit than any marketing metric.”

 

Funding/Revenue

Are you able to discuss funding and/or revenue metrics? Srivats said:

“WaveMaker is a Pramati group company, and Pramati has been self-funded for over two decades with group company revenues and proceeds from M&A. It gives us the freedom to make product decisions based on what’s right for customers on a multi-year horizon.”

“Pramati’s track record includes building and exiting multiple portfolio companies: Qontext (social platform for enterprise collaboration) was acquired by Autodesk, Imaginea (Cloud services) was acquired by Accenture, and SpotCues (deskless worker platform) was acquired by UKG in 2022. These exits demonstrate the ability to build durable products that attract acquirers, while the parent company maintains independence and continues investing in new ventures.”

“WaveMaker has grown net subscriptions every year since 2016. Our licensing model is annual subscriptions based on developer seats, with zero runtime fees which means our revenue scales with customer adoption, not with production usage metering. We currently serve customers across 17 countries.”

 

Total Addressable Market (TAM)

What total addressable market (TAM) size is the company pursuing? Srivats assessed:

“The global enterprise application market is projected to grow from $320 billion to $626 billion by 2030, according to some estimates. Within that, the AI code generation market is expected to reach approximately $25 billion by 2030. WaveMaker sits at the intersection of both: enterprise application development accelerated by AI.”

“Our specific addressable market is in midmarket with early developer teams building custom, UI-heavy, multi-platform web and mobile applications, particularly in financial services, insurance, telecommunications, supply chain, and enterprise software. These are organizations with 5 to 500 developers who need production-grade output, architectural governance, and predictable costs not weekend prototyping tools or individual coding accelerators.”

 

Differentiation From The Competition

What differentiates the company from its competition? Srivats affirmed:

“The competitive landscape segments into four categories, and WaveMaker occupies a distinct position in each comparison.”

“Against coding accelerators like Cursor and Claude Code: they make individual senior developers faster; WaveMaker normalizes output quality across entire teams through constrained markup generation and deterministic code output. They have no design system awareness; we treat design systems as first-class architectural artifacts.”

“Against vibe coding platforms like v0 and Lovable: they excel at beautiful prototypes; WaveMaker is built for production. They’re locked to specific ecosystems (v0 to Vercel/Next.js); we generate standard code deployable anywhere.”

“Against design-to-code tools like Locofy: they convert Figma to frontend code; WaveMaker goes full-stack, frontend, backend, API integration, security, deployment, all from a single specification.”

“Against enterprise low-code platforms like OutSystems: they require proprietary runtimes and certified developers; WaveMaker generates standard Angular, React, React Native, and Spring Boot with zero lock-in. Any Java/JavaScript developer can work with our output.”

“The unique combination of deterministic output, design system governance, full-stack generation, multi-platform targeting, and zero runtime lock-in exists nowhere else in this landscape simultaneously.”

 

Future Company Goals

What are some of the company’s future goals? Srivats emphasized:

“Near-term, we’re focused on expanding early access adoption for the agentic platform and demonstrating the two-pass architecture in production customer environments. We want enterprise teams to experience firsthand what it means to go from Figma design to deployed multi-platform application with deterministic, auditable code.”

“We’re deepening our agent framework so organizations can build custom domain-specific agents that inherit the same reliability guarantees — imagine a financial compliance agent or a supply chain integration agent that produces governed, deterministic output for highly specialized workflows.”

“On the market side, we’re expanding our system integrator partner ecosystem and strengthening our presence in financial services, insurance, telecommunications, and supply chain.”

“Longer-term, we believe the enterprise application development market is heading towards an agent-driven generation model with guardrails and architecture built-in — where AI composes interfaces dynamically from governed component libraries, adapting to each user’s context and role. WaveMaker’s design system infrastructure and WML architecture are the foundation for that future. We’re building toward it deliberately.”

 

Additional Thoughts

Any other topics you would like to discuss? Srivats concluded:

“One thing I think about a lot, borrowing from a recent article authored by my colleague and CTO, Deepak Anupalli, is the paradox of UX in the AI era. There’s a widespread assumption that AI will simplify interfaces to the point where design doesn’t matter. The reality is the opposite.”

“As AI automates away the easy, repetitive interactions such routine data entry, and simple form filling and what remains are the high-stakes decisions: a wealth advisor approving a million-dollar portfolio rebalancing, a supply chain manager responding to a stockout alert, a compliance officer reviewing an AI-generated audit narrative. These interactions don’t need less design; they need profoundly better design. The UX becomes the trust surface.”

“Enterprise applications typically blend five distinct interaction types — transactional, exploratory, data entry, analytical, and adaptive agentic — each with different trust requirements. A single generic AI-generated UI cannot serve them all. That’s why WaveMaker’s design-governed approach matters: we ensure that each interaction type gets the trust-appropriate UX treatment it requires, enforced through the generation pipeline rather than hoped for through documentation.”

“I believe the companies that understand this – that design is the guardrail AI needs, not decoration AI replaces — are the ones that will build lasting enterprise software in this era. That’s the thesis WaveMaker is built on, and it’s what drives me each day.”

This interview is originally published on Pulse 2.0.

Horses and Tigers Are Different : Why AI Is Unlike Every Technology Platform Shift Before It

AI differs from previous technology waves because it increasingly performs the implementation work that historically created demand for IT services. Drawing on 35 years of experience across ERP, SaaS, cloud, and AI, Vijay Pullur argues that the future belongs to organizations that transform domain expertise into proprietary software products rather than relying solely on labor-based services.

The rapid rise of large language model platforms – Anthropic, OpenAI, Google Gemini – has put the global IT services model in serious jeopardy of becoming obsolete. Dramatic as that sounds, I believe it is precisely the right framing.

Since January 20th, shares of virtually every major global IT services company have dropped between 20 and 30 percent. Accenture is down roughly 30 percent. IBM is down 24% with a single-day 13% decline around February 23rd-24th. Wipro and Coforge have shed nearly 25 percent. TCS, Infosys and HCL Tech are all trading at multi-year Lows.

The only comparable sector decline in such a compressed window was COVID-era 2020 – except that time, the Dow Jones fell 39 percent alongside them. This time, the Dow is essentially flat.

The broader economy is not in crisis. It’s the IT services business model that the market is repricing – and it is signaling a seismic shift.

Previous Platform Shifts AI
Needed implementation partners Performs implementation
Expanded services demand Compresses some services demand
Separate product and service Increasingly combines them
More consultants required More automation possible

 

Mounting the Horse: A 35-Year Playbook

AI impacting traditional revenue models built around human capital seems to be the central story for this collapse. However, nearly every major IT services firm has announced an AI partnership. Accenture joined OpenAI’s Frontier Alliance alongside McKinsey, BCG, and Capgemini. TCS, Infosys, and Wipro all have deals with Anthropic, OpenAI, or Google.

In previous cycles, announcements like these would lift a company’s stock for weeks. This time, Accenture’s shares fell 6.6 percent on the very day it announced its OpenAI partnership. The market is not buying the story.

The 35-year IT services playbook used to be: announce a partnership with the rising platform, stand up a competency center, train people, and use the partner’s brand to win enterprise contracts. SAP and Oracle in the ’90s for ERP implementation. Salesforce in the 2000s for SaaS-led services. AWS, Azure, and Google Cloud in the 2010s for Cloud migration. Each time, the software platforms made clear that services were not their business. They left the gap open. Services firms filled it and built empires. I call this “mount the horse and ride.” We did exactly this at Imaginea – the technology services company I co-founded under Pramati, later acquired by Accenture. Pick the fastest horse early enough, and you win.

Not anymore.

 

AI Is Different. You’re Riding a Tiger.

What is an AI platform shift?

Unlike cloud computing or SaaS, AI platforms increasingly automate portions of the software development and implementation process itself, changing the economics of IT services rather than simply introducing another technology stack.

In every previous cycle, technology vendors needed IT services companies. But AI does not need implementers in the same way – it is the product and service – rolled into one. When Claude Code can automate COBOL modernization, and when the CEOs of Anthropic and OpenAI publicly state that software engineering roles will largely disappear within three years, they are not describing disruption. They are describing replacement. On a horse, you are in control. The tiger turns on you eventually.

Jefferies just downgraded TCS, Infosys, HCL Technologies, and three other major IT firms, explicitly citing AI as a structural threat to the business mix. JP Morgan warned that clients will reallocate spending as AI-led efficiencies shrink demand for managed services. This is now the mainstream analytical consensus – not a fringe view.

 

Build the Moat or Become Irrelevant

The answer is not another partnership announcement. The era of scaling revenue by scaling headcount is over. The firms that survive will use their deep domain expertise— the genuine understanding of how enterprises actually work—to build proprietary software assets. Proprietary software assets are reusable software products, platforms, frameworks, or intellectual property that generate value independently of billable engineering hours. Products that clients cannot simply replace with a prompt. Use AI to build at extraordinary velocity but build something that is yours. The most pragmatic path may be acquisition: seed a product culture with companies that already have it and play the game with your software; not just your services.

This blog is originally published on Business Today.

 

FAQs

Q1. What does "mount the horse" mean in tech services history?

"Mount the horse" describes the strategy that helped IT services companies grow through previous technology waves. When platforms such as SAP, Oracle, Salesforce, AWS, Azure, or Google Cloud emerged, services firms built expertise around them, trained engineers, became implementation partners, and helped enterprises adopt those technologies. This approach proved highly successful for decades because platform vendors relied on services firms to drive adoption.

Q2. What is the "riding a tiger" analogy for AI in business?

The "riding a tiger" analogy illustrates why AI differs from previous technology platforms. Earlier platforms depended on IT services companies for implementation, allowing both platform vendors and services firms to grow together. AI, however, increasingly performs some of the implementation work itself. In that sense, AI is not simply another platform to ride - it is a force that can fundamentally reshape or even replace parts of the traditional services business model, requiring companies to rethink how they create long-term value.

Q3. How is generative AI replacing traditional IT implementers?

Generative AI is automating many software development tasks that previously required large implementation teams, including code generation, application modernization, documentation, and testing. While human expertise remains essential for enterprise architecture, governance, and business strategy, AI is reducing the amount of manual implementation work that has historically driven revenue for IT services firms.

Reimagining AI-Assisted Coding for Team Scale in Enterprises

AI coding tools have advanced rapidly, but most AI-assisted coding tools are still designed around the individual developer. Whether you're using an AI coding assistant inside an IDE or evaluating modern AI code generation tools, their effectiveness depends heavily on a user’s ability to write understandable prompts, preserve architectural coherence across sessions, and identify areas that require additional work. This model works for some engineers, but it is far less dependable for a large organization’s development team, where enterprise software must align with defined standards, delivery processes and governance requirements.

Today, AI development systems that reduce reliance on individual judgment are coming to market. Rather than functioning as standalone AI coding tools, they bring embedded structure, constraints, and verification directly into the platform. For organizations, customer-facing products and portals, building custom, design-led, mission-critical applications, the question is no longer whether AI can generate code. The real question is what an AI coding platform must look like to enable repeatable, reliable delivery at AI speed.

The Limits Of Prompt-Based Development In Enterprise Software Delivery

Software delivery follows established patterns in most mature organizations. Teams work within approved technology stacks, design systems, security policies, and clear expectations around testing and release quality. General-purpose coding agents, however, typically require these constraints to be recreated through prompts. Developers end up pasting in long instructions and specifications, repeatedly re-establishing project context, reminding the model of standards, and defining what “done” looks like despite limited context windows that can drift as the codebase grows in size, scope, and complexity.

This model carries a hidden cost. Teams spend valuable time following and keeping track of instructions instead of building features, and results vary widely depending on who is using the tool. In environments with multi-disciplinary, cross-functional teams, that variability becomes a real risk. It can degrade user experience, undermine architectural integrity and increase review cycles and remediation efforts downstream.
AI coding products built for teams should treat specs, application architecture, context, and guardrails as historical context and information, embedded in the system, rather than as prompts.

Rules Before Creativity For High-Functioning Architecture

Historically, clean architecture was rarely the primary challenge in mature enterprise software environments. The real priorities were, and remain, user experience, consistency, long-term maintainability, and adherence to established standards. An AI development platform built for teams should reflect that reality by providing a controlled range of acceptable outputs so generated code always aligns with organizational patterns.

For this to become reality, AI-powered coding tools must come with realistic, modern defaults and enforceable policies. This includes how components are prioritized, how data is accessed, which security checks are required, how errors are remediated, and which dependencies receive approval.

Embedding these standards also strengthens AI-assisted secure coding, reducing the chances that generated applications introduce security or compliance issues while allowing developers to focus on delivering business functionality.

Specifications Should Be Structured, Modular And Enforceable

Specifications used in AI-assisted development are more effective when they are not treated as a single document. A spec should be structured in a way that aligns with how agent-based systems operate and modular enough for teams to apply only the relevant portions to a given feature without reintroducing full project context each time.
In practice, a specification model requires clearly defined sections for scope, constraints, project structure, conventions, and boundaries. Versioning enables changes to be tracked over time, while enforceability allows the system to detect deviations or violations rather than relying solely on text generation that appears compliant. This approach can function as a shared operating model for a team rather than a collection of individual prompts.

Structured Intermediate Models Help Preserve The Design

A key design consideration for modern AI code generation tools is whether code is generated directly from natural language or produced from an intermediate representation that captures intent before code generation begins.

For team-based enterprise web application development, a multi-stage approach is often the most effective. Requirements and design inputs are first translated into a structured representation of the application—including screen composition, component mapping, bindings, and constraints—before framework-specific code is produced.

This significantly reduces regeneration of large sections of code, minimizes architectural drift, and creates a stable reference point that can be reviewed and validated.

For organizations building modern enterprise business applications, an intermediate representation also improves collaboration by allowing designers and product stakeholders to review application intent while engineers retain responsibility for implementation.

Policies Should Be Built-In And Consistently Applied

Organizations rely on policies or safeguards to manage risk and reduce variability across teams. When AI coding systems require individual users to define these policies in their prompts, the outcomes can vary significantly between developers and teams. Platforms intended for organizational use typically need to apply guardrails at the system level so they are shared and consistently enforced.

These policies should be in place at all levels. Some may take the form of hard constraints that prevent undesirable patterns and others may function as policy checks confirming architectural rules, security requirements and coding conventions. Workflow-related controls, such as review and approval steps, are also relevant. In design-led applications, user interface rules surrounding components, design tokens, and accessibility baselines play a similar role.

The purpose of these policies is not to limit the work being completed, but to ensure that increased development speed does not introduce additional operational risk or quality degradation.

Completion Criteria Should Be Provable And Clear

One recurring challenge in AI-assisted development is determining when work is complete. While code generation can be rapidly created, teams still need the confidence to determine when outputs meet acceptance criteria, pass required tests, integrate correctly, and comply with relevant policies. AI coding systems designed for team environments benefit from providing a clear, machine-verifiable definition of completion.
In practice, this involves associating requirements with acceptance criteria, expecting appropriate test coverage, executing checks automatically, and identifying gaps between the specification and the current implementation. Systems that can iterate in a controlled manner, proposing corrections and stopping when criteria are met, reduce the need for repeated reviews and increase confidence in the output.

Collaboration And Governance Must Be Supported By The Product

For AI coding systems to be effective in team environments, collaboration and governance capabilities need to be integrated into the product itself. Shared standards, templates, and design systems are necessary to ensure consistency. Role-based permissions help distinguish between who can modify standards and who can generate or modify features. Auditability is also important, enabling teams to understand which specification version informed an output and how changes were introduced.
Integration with existing delivery infrastructure, such as source control, CI/CD pipelines, and issue tracking systems, further supports adoption in established environments. Without these capabilities, AI coding tools are more likely to function as individual productivity aids rather than systems that support organizational delivery processes.

Distinguishing Between Tools And Delivery Systems

One way to evaluate the maturity of an AI development platform is to measure how much it depends on the user's expertise.
When consistent results require exceptional prompting skills, architectural knowledge, or manual review, adoption rarely scales across an organization.

The next generation of AI coding tools will increasingly resemble complete enterprise application platforms rather than standalone assistants. They preserve design intent, enforce application architecture, embed governance, and define completion through measurable outcomes instead of subjective judgment.

For organizations building customer-facing enterprise applications, the conversation is shifting beyond faster code generation. Success increasingly depends on delivering maintainable, governed, and architecturally consistent software at scale.

 

FAQs

  1. What are the top features of an enterprise application development platform?
    An enterprise application development platform should provide far more than AI code generation. Key capabilities include support for enterprise application architecture, reusable design systems, policy-based governance, role-based access control, versioned specifications, automated testing, secure coding practices, CI/CD integration, and interoperability with existing enterprise software ecosystems. AI-powered development platforms that combine these capabilities with deterministic application generation help organizations accelerate delivery while maintaining consistency, compliance, and long-term maintainability.
  2. How can I get started with AI-assisted coding?
    Getting started with AI-assisted coding begins by identifying repetitive development tasks where AI can improve productivity, such as generating boilerplate code, building user interfaces, or implementing business logic. For enterprise teams, the next step is choosing an AI coding platform that supports existing application architecture, security policies, development frameworks, and team collaboration. Rather than relying entirely on prompt-based coding, organizations benefit from platforms that provide reusable specifications, shared guardrails, and governance capabilities that enable consistent enterprise application delivery across teams.
  3. What are the best AI-assisted coding tools available?
    The best AI-assisted coding tools do more than autocomplete code or generate snippets. Enterprise development teams should evaluate platforms based on how well they preserve application architecture, enforce organizational standards, support secure coding, and integrate with existing development workflows. Features such as shared specifications, policy enforcement, design-to-code capabilities, structured intermediate representations, and CI/CD integration become increasingly important when building enterprise applications at scale. Platforms that combine AI with governance and deterministic application generation are typically better suited for enterprise software delivery than tools designed solely for individual productivity.

 

This blog is originally published on DevOps.com

AI Meets Determinism: A Hybrid Two-Pass Architecture for Controlling Variability in AI

For years, until recently, software did exactly what it was told. Developers meticulously coded precise step-by-step instructions for various processes. When executed, it did exactly that and nothing else. No matter how many times the code ran, the outcome was identical. It was totally deterministic.

AI, however, introduced the idea that software could “think” — assess a situation, evaluate various options, plot the best path forward, and in some situations, execute those steps. Run code multiple times and you may get structurally different code — different variable names, different logic paths, different dependencies.

This variability has been anathema to the need for reliability and consistency that users trusted in software for years — and that the industry has spent half a century trying to eliminate.

Although AI opens up an array of exciting new possibilities, left on its own, AI has demonstrated that it can go wildly off the rails.

Still, the solution isn’t necessarily to try to make AI deterministic, but to architecturally bake guardrails into the system itself to keep variability within acceptable limits.

When AI Goes Rogue

The inherent dangers of just throwing AI at a problem have been well publicized. It can hallucinate. It can spill secrets. Even with the right permissions and policies in place, it can do massive damage, not only internally, but also to a company’s reputation.

In one instance involving Cursor, a Claude-based IDE, and Supabase’s Model Context Protocol (MCP), an agent with broad database privileges was tricked into exfiltrating secrets using a user’s support ticket text.

The large language model (LLM) agent did so without violating any database permissions.

In another example, a Replit agent, in the midst of building an application, ignored explicit instructions to freeze changes and instead deleted an entire production database —months of real user data just gone. Leading up to this, despite being repeatedly instructed not to create synthetic data, it had made up thousands of fake database records. Afterward, it created its own human-like apology. Woops, sorry indeed.

The risks — hallucinated dependencies, security vulnerabilities that look correct on the surface, logic errors that only surface in production, and code that no two runs produce identically — are among the reasons Gartner recently predicted that over 40% of agentic AI projects will be canceled by 2027. 

Those risks have leaders uneasy. Eighty-three percent of AI leaders now report major or extreme concern about generative AI, an eight-fold increase since 2023, according to a Lucidworks study.

Yet only 1 in 5 (21%) companies in the Deloitte survey report having a mature model for governance of autonomous agents.
Deloitte also found that 10.69% of respondents admit to using AI coding assistants without official permission, in an unverified or unmonitored way, which no doubt has their bosses pulling their hair out.

A Hybrid Two-Pass Architecture

So, the question around AI isn’t so much about whether to use it all, but how to limit the damage it can do while still taking advantage of its “thinking” capability — and possibly ability to act as well.

One approach might be a two-pass hybrid model to architecturally put guardrails into the system itself. It might look like this:

Pass One: An LLM, trained on and constrained by a Model Context Protocol (MCP) derived from a deterministic, model-driven code generator, converts natural language intent into a lightweight language-agnostic intermediate markup expressed in a vocabulary the AI has been trained to produce reliably. Because the MCP defines strict boundaries — valid components, allowed patterns, supported data structures — it prevents hallucination.

Pass Two: A proven, model-driven code generator takes that markup and converts it into production code, whether that be JavaScript, Python or React, or even multiple languages. It produces the same reliable output every time and eliminates stylistic differences among different developers. It provides the consistency, compliance, testability, and maintainability that organizations have long relied on.

This hybrid model addresses barriers leaders most often cite — integration with legacy systems, security risks, lack of technical expertise — because each pass enables each of the different technologies to do what it does best. Generative intelligence is focused on understanding intent, interpreting natural language and reasoning about application behavior, and it delegates what it does worst (producing identical, production-grade code across runs) to a system purpose-built for that job.

AI converts natural language to specification. The code generator handles the engineering leap from specification to code.
It gives every developer — regardless of experience, language proficiency, or domain expertise — boundaries for converting their intent into production-quality applications.

This standardization means compliance teams can certify the output once — not re-audit every pull request. Teams can repurpose a single language-agnostic intermediate markup to target multiple platforms. A junior developer produces the same reliable markup as a senior architect because the architecture defines and controls the variability across the organization.

Constraining the AI to a validated pattern library mitigates security vulnerabilities. It reduces technical debt because the generated code follows consistent, maintainable architecture. By generating compact markup instead of verbose code, it reduces token cost and latency. Auditability and compliance are simplified because the deterministic layer produces traceable, repeatable artifacts.

Companies are adding AI capabilities at a staggering rate. In 2025, 84% of developers report using AI coding tools, with over half relying on them daily. Companies surveyed by Deloitte reported broadened worker access to AI by 50% in just one year. And 74% of companies said they plan to deploy agentic AI within two years.

Seventy-two percent of developers who have tried AI coding tools now use them every day. They report that 42% of the code they commit these days is AI-generated or assisted, according to a Sonar survey.

The rise of generative AI introduced extraordinary capabilities, but it’s not just a matter of accepting AI’s non-determinism as the cost of doing business. Deterministic boundaries — systems where AI takes human intent to structured specification, and proven code generators complete the journey from specification to production code — can make AI adoption safe, scalable, and accessible to every developer out of the box.

 

FAQs

  1. What are the key differences between agentic AI and generative AI?
    Answer: Generative AI focuses on creating content such as text, code, or images in response to prompts. Agentic AI goes a step further by reasoning, planning, making decisions, and executing multi-step tasks to achieve a goal. While generative AI produces outputs, agentic AI can orchestrate workflows and interact with tools, APIs, and enterprise systems. For enterprise software development, combining agentic AI with deterministic engineering guardrails helps organizations achieve both productivity and predictable outcomes.
  2. What are the benefits of hybrid AI architecture compared to traditional AI models?
    Answer: Hybrid AI architectures combine the reasoning capabilities of large language models with deterministic software engineering. Instead of allowing AI to generate production code directly, the AI first creates a structured specification, which is then converted into production-ready code by a deterministic engine. This approach reduces hallucinations, improves security, enables repeatable outputs, lowers token costs, and supports enterprise governance while preserving AI's speed and flexibility.
  3. What are the best agentic AI tools available today?
    Answer: The best agentic AI tools depend on your use case. Developer-focused platforms like Cursor, Claude Code, Codex, and Replit accelerate coding, while enterprise platforms such as WaveMaker combine AI agents with deterministic code generation, architecture guardrails, design systems, and governance to deliver production-ready enterprise applications. Organizations should evaluate tools based on reliability, security, maintainability, integration capabilities, and long-term code ownership.

 

This blog is originally published on Techstrong.ai