Track recordPV-2025 · DossierLead for ai strategy assessment and setting

AI adoption, gated and governed

A CEO call to put SentinelOne on Windsurf, a vendor process that usually took months, and engineers who worried the tool was there to replace them.

Org
SentinelOne, the AI org
Role
Principal Infrastructure Engineer
Period
2025 to April 2026
Split
The Windsurf program, while supporting the DevOps and delivery work half-time
Scope
About 800 seats, gated by request, across engineering, engineering managers, product managers, sales engineers, IT and other staff
Technical drawing: a gated rollout from request to training, invitation, approval and seat, with details of the token pool's projected burn and the with-AI against without-AI estimate. Gated rollout Request Training Invite Approval Seat Detail A Pool PO Detail B Without AI Actual Principal Infrastructure Engineer 2025 Apr 2026 1 2 3 4 5 6 7
Drawing
A gated rollout, governed and measured
Org
SentinelOne
Period
2025 to April 2026
Drawing no.
PV-2025
Scale
Not to scale
Source
Approach
Checked
2026-11-03
  1. About 800 seats, so access was gated by request.
  2. Mandatory training before a seat was granted.
  3. The invitation to a survey, then the approval flow.
  4. The tracking, authored with the rest of the rollout.
  5. Detail A. A token budget per developer, backed by one shared pool of non-expiring overage tokens.
  6. Projected burn, so the purchase order had time to go through before anyone was blocked.
  7. Detail B. Engineers recorded an estimate without AI beside the actual points at close.
Describe this drawing

The Windsurf rollout Paul built at SentinelOne. Five boxes in a row show the gated path to a seat: request, mandatory training, invitation and approval, and the seat, with a dashed tracking line beneath them. Detail A shows the shared overage pool and a chart of its balance, dropping sharply where one heavy user burns through it, then dashed toward empty. A line marked PO crosses before empty, where the purchase order has to start. Detail B shows one issue with its estimate without AI, dashed, and its actual points. Lengths and slopes are not measurements. A dimension line spans the role, Principal Infrastructure Engineer, from 2025 to April 2026.

The dossier

Situation

SentinelOne had made GitHub Copilot available to some developers in 2024, with little adoption. In late April 2025 the CEO decided SentinelOne would move to Windsurf and drive real adoption, owned by the AI org. It was treated as a top-priority program. Onboarding a new vendor at SentinelOne typically took 3 to 6 months.

Objective

Acquire and onboard Windsurf fast, get it into daily use across the company, keep the token budget under control, and measure the productivity effect instead of asserting it.

Action

  1. Compressed procurement. Engaged the Windsurf team directly and pushed 30+ people across finance, compliance and governance, IT, engineering, procurement and security, up to the CISO, to move fast. Acquisition and onboarding were complete by May 27.
  2. Built the rollout machine. Wrote the onboarding process, the mandatory training before a seat was granted, the tracking, the invitation and approval flows, then engaged the teams directly.
  3. Used the coverage mandate. When SentinelOne mandated 90%+ unit test coverage in July, with the CTO’s backing, showed engineers live how much faster Windsurf got them to coverage.
  4. Disarmed the skeptics. Opened the group trainings with my own history, from writing C in vi to the graphical IDE and integrated debuggers, so Windsurf read as a sharper instrument for the same craftsman.
  5. Went beyond engineering. Led MCP adoption and MCP creation, and started training for Product Management, IT, SecOps and Sales Engineering.
  6. Governed the tokens. Built usage reporting, automated outreach to over-consumers, and projected overage burn, so the purchase order for more credits could flow before anyone was blocked.
  7. Measured the counterfactual. Had engineers record a without-AI estimate in Jira beside the actual points, for a per-issue comparison of work with and without AI.

Result

People I helped move onto AI-accelerated development in weeks, across engineering, product, sales engineering, IT and other staff
800+
People across the org pushed to move fast
30+
Acquisition and onboarding complete, against a usual 3 to 6 months
May 27
Unit test coverage mandate, met across most of the codebase within weeks
90%+
  • Procurement compressed from SentinelOne’s typical multi-month cycle to under a month.
  • Uptake climbed to nearly the full seat allocation, with millions of lines of AI-generated code accepted over the following months.
  • The mandated coverage bar met across most of the codebase within weeks, including an acquired company’s monorepo.
  • Code changes moved from nearly all additions to a balanced mix of additions and deletions: a codebase growing faster and getting leaner at the same time.
  • Issues resolved per sprint rose substantially for AI-enabled developers.

Leadership

Approach
Instrument the counterfactual, or you will read the gain backwards. A without-AI estimate per issue showed the real gain.
Partnership
Ran the training with the Coralys training team and the AI Champions program, through office hours and small-group sessions.
Influence
Met doubt with my own history as a developer, and used the coverage mandate to show the tool’s value live.
Delivery
Sole Windsurf app owner, with Kestra-based collectors pulling prompt-credit, lines-of-code and acceptance metrics into the data lake.

This is the kind of work behind the fractional CISO and CTO offer.

Book

Bring the problem.
Leave with the next three moves.

Length
30 minutes
With
Paul, directly
Reply
Within 24 hours
After
Scoped and priced in writing after a 30-minute call.
Book a 30-minute intro call

30 minutes, directly with Paul. Or write to paul@vilevac.com