AI is eating software: leader guide
Practical perspective from an IT leader working across operations, security, automation, and change.
8 minute read with practical, decision-oriented guidance.
Leaders and operators looking for concise, actionable takeaways.
"AI is eating software" describes the growing use of AI to build, deploy and maintain business systems.
IT leaders need to assess the implications for development, governance and team skills.
From writing code to expressing intent
For decades, software development followed a predictable pattern. Business stakeholders described what they wanted. Analysts translated that into requirements. Developers wrote code. Testers checked it. Ops deployed it. The cycle repeated.
That model is breaking down.
The proposed approach is intent-driven development. Instead of manually writing every line of code, developers describe the desired outcome, and AI systems generate, integrate, and maintain the software autonomously. Teams are adopting parts of this approach.
Capgemini's Top Tech Trends 2026 report puts it bluntly: the competitive edge now hinges on "mastering orchestration and governance rather than manual coding."
This changes the work developers need to do. The best engineering teams in 2026 aren't the ones writing the most code. They're the ones who can articulate intent clearly, govern AI outputs effectively, and orchestrate systems that largely build themselves.
What this looks like in practice
The following examples describe changes to software development and operations:
1. Self-assembling applications
AI coding assistants have evolved well beyond autocomplete. Modern tools can scaffold entire microservices from a natural language brief, generate test suites, and wire up integrations with existing systems. Teams that once spent weeks on boilerplate now spend hours reviewing and refining AI-generated outputs.
More of the work moves into reviewing and adapting generated code. Your developers become editors and architects rather than line-by-line builders.
2. Self-healing infrastructure
AI-powered operations tools now detect anomalies, diagnose root causes, and apply fixes without human intervention. When a deployment causes a memory leak at 3am, the system rolls back automatically, generates an incident report, and queues a fix for morning review.
This isn't theoretical. Organisations running intelligent operations report up to 60% reduction in mean time to resolution (MTTR) and significantly fewer out-of-hours callouts. That would reduce pressure on small IT teams.
3. Continuous optimisation
Traditional software sits static between releases. AI-augmented systems continuously analyse usage patterns, performance metrics, and user behaviour, then suggest or implement improvements. Database queries get optimised automatically. UI flows adjust based on real user journeys. Security patches apply themselves.
The result is software that gets better between releases, not just during them.
The governance challenge
Who is accountable when AI-generated software fails?
IT leaders need a clear answer. When a human developer introduces a vulnerability, there's a clear accountability chain. When an AI system generates code that passes automated testing but contains a subtle logic flaw, the accountability picture gets murkier.
For a comprehensive approach to AI governance in the enterprise, see my guide on why business AI enablement matters and the practical agentic AI enterprise guide.
Three governance principles every IT leader should establish now:
-
Human-in-the-loop for critical systems. AI can generate and suggest, but changes to production systems handling financial transactions, personal data, or safety-critical operations need human sign-off.
-
Provenance tracking. You need to know which code was human-written, which was AI-generated, and which was AI-modified. This is becoming a regulatory requirement under the EU AI Act and the UK's evolving AI framework.
-
Output validation pipelines. AI-generated code needs its own quality gates. Static analysis, security scanning, and behavioural testing should be automated and mandatory before anything AI-produced touches your production environment.
The skills shift
If you're managing an IT team, the skills conversation has changed dramatically. The developers you need in 2026 look different from the ones you needed in 2023.
Rising in value:
- Systems thinking and architecture skills
- Prompt engineering and AI orchestration
- Security review and threat modelling
- Business domain expertise (understanding what to build)
- Data governance and quality management
Declining in value:
- Rote coding in a single language
- Manual testing without automation skills
- Traditional project management without technical fluency
- Infrastructure management without cloud/AI literacy
This doesn't mean experienced developers become obsolete. Quite the opposite. Deep technical knowledge is more valuable than ever because someone needs to understand what the AI is doing and catch it when it gets things wrong. But the application of that knowledge shifts from production to oversight.
A recent survey found that 27% of UK workers worry their jobs could disappear within five years due to AI. For IT professionals, the real risk isn't job loss. It's skill irrelevance. The ones who adapt to orchestrating AI rather than competing with it will thrive. For a balanced take on separating AI hype from genuine capability, see my piece on AI pragmatism in the enterprise.
Cloud 3.0: the infrastructure AI needs
AI workloads also affect infrastructure requirements.
The first wave of cloud was about migration. The second was about cost optimisation. "Cloud 3.0" describes cloud infrastructure designed to support AI workloads.
What this means practically:
-
Hybrid is the default, not the exception. Fine-tuning models on proprietary data, managing data sensitivity, and deploying low-latency inference pushes organisations toward a mix of public, private, and sovereign cloud. If your cloud strategy is still "all-in on one hyperscaler," it's time to revisit.
-
GPU and AI-specific compute matters. Inference workloads have different requirements from traditional web applications. Your infrastructure team needs to understand AI compute patterns, not just traditional scaling.
-
Data gravity is real. Where your data lives increasingly determines where your AI runs. For UK organisations navigating post-Brexit data adequacy and upcoming AI regulation, this has strategic implications beyond just performance.
The sovereignty question
There's a tension running through all of this. AI systems, cloud platforms, and development tools are overwhelmingly built by a handful of American and Chinese companies. If your software is increasingly AI-generated, and that AI is provided by a foreign vendor, what does that mean for your organisation's autonomy?
Capgemini calls this the "borderless paradox of tech sovereignty." The goal is to stay connected to international providers while retaining control over critical dependencies.
For IT leaders, this translates to practical decisions:
- Can you switch AI providers if needed, or are you locked in?
- Where does your training data go, and who has access?
- If a geopolitical event disrupts access to your AI tools, can your teams still function?
These aren't hypothetical questions. They're procurement and architecture decisions you should be making now.
What to do this quarter
If you're an IT Director, CTO, or Head of IT reading this, here's a practical checklist for Q1 2026:
Assess your current state:
- How much of your development pipeline already uses AI assistance?
- What governance exists around AI-generated code?
- Do you have visibility into which production code is AI-generated?
Build your foundation:
- Establish an AI code governance policy (even a simple one)
- Set up provenance tracking for AI-generated outputs
- Review your cloud architecture against AI workload requirements
Invest in your people:
- Identify which team members are already using AI tools effectively
- Create space for experimentation (hackathons, 20% time, dedicated sprints)
- Update your hiring criteria to reflect the skills shift
Stay informed:
- Follow the UK government's AI regulatory developments
- Track the EU AI Act implementation timeline
- Join peer networks where IT leaders share real-world AI adoption experiences
Plan the next review
AI eating software isn't a future event. It's happening now, in organisations of every size and sector. The question for IT leaders isn't whether to engage with this shift, but how to do it responsibly, strategically, and in a way that genuinely improves outcomes.
The organisations that get this right won't just build software faster. They'll build better software, with fewer defects, lower maintenance costs, and greater alignment with business needs. They'll free their technical talent from repetitive work and redirect it toward innovation and oversight.
Use measured pilot results to decide where AI assistance is suitable, rather than assuming every task should adopt it.
Review which development tasks use AI and who approves the resulting changes. If you need help developing a technology strategy that accounts for AI's impact on your software stack, my IT management consulting and technical consulting practices can provide the independent perspective you need.
Daniel Glover is Head of IT Services at a major UK e-commerce business, managing technology strategy across a 250+ user organisation. He writes about IT leadership, digital transformation, and making technology work for real businesses.
Share this post
About the author
Daniel J Glover
IT Leader with experience spanning IT management, compliance, development, automation, AI, and project management. I write about technology, leadership, and building better systems.
Continue exploring
Keep building context around this topic
Jump to closely related posts and topic hubs to deepen understanding and discover connected ideas faster.
Explore topic hubs
Related article
AI centre of excellence guide
Build an AI centre of excellence with an operating model, project intake process, governance responsibilities and a 90-day launch plan tied to business outcomes.
Related article
Measuring AI ROI: a practical guide
Most organisations cannot quantify their AI investments. A practical framework for IT leaders to measure AI ROI beyond the hype and justify investment.
Related article
AI code is creating a security debt crisis
AI-generated code is creating security vulnerabilities faster than teams can fix them. Here is what IT leaders must do about the growing remediation gap.
Related article
Copilot connectors: preserve access scope
Review Copilot connectors against publisher settings, user access and staged rollout. Preserve restrictions and approved exceptions with tested evidence.
Ready to improve your IT operations?
Request a free 30-minute consultation to discuss your IT challenges. Send a short outline and I will reply to arrange a suitable time. No obligation.
Request a free 30-minute consultationGet Occasional IT Leadership Insights
IT leadership insights, occasionally. No fluff. Unsubscribe any time.
No spam. Unsubscribe any time.