Case Study

From Schema to Full UX in Two Builds

A production project management tool for PE operators — built autonomously in two overnight missions. 26,000+ lines. Zero developers. Zero human-written code.

26,669
Lines of code
205
Files
~3h
Total build time
0
Lines written by a human

The Problem

Every project management tool is built for the wrong audience. Jira is for dev teams. Kantata is for finance admins. Monday is for everyone and therefore no one. None of them are built for the operator — the person logging three minutes between calls, turning a transcript into five action items, assembling a steerco from work that's already been done.

The stakes are high. In Nordic PE, reputation is everything. One bad first impression with amateur tooling and doors close across firms. The project management tool is visible to the partners who decide whether to engage you again.

The Build

Two missions. One night each. A complete application.

Mission 1 — The Foundation
9 migrations, 17 tables, 3-tier data ontology. Row-level security on every table (33 policies). Column-level tokenization via pgsodium for PII fields. Hash-chained, append-only audit log. Hexagonal architecture with 6 ports and Supabase adapters. SAML scaffolding. Seed data. ONTOLOGY.md and SECURITY.md — audit-grade documentation produced as part of the build, not after.
Mission 2 — The Experience (43 tickets, overnight)
Full UI in one autonomous run. Portfolio overview. Engagement workspace with tabbed navigation across 11 modules. Five-second time entry modal. Invoice drafting with rate-aware roll-up. Client portal (isolated route group). Transcript upload with AI extraction. Steerco generation with claim-matching. Calendar OAuth scaffold. Activity feed. Audit log viewer. All in Aether Amber dark theme.
Mission 2c — Completion
Calendar, email, Stripe, docs. Google + Microsoft calendar OAuth. Invoice email via Resend. Stripe customer/invoice mirror (read-only). Comprehensive README. TypeScript clean — zero errors.

What Was Built

Portfolio Overview

All engagements at a glance. Status, health, next actions. The view an operator checks every morning.

Engagement Workspace

11 tabbed modules per engagement: overview, workstreams, actions, risks, decisions, stakeholders, time, invoices, files, transcripts, Gantt.

Five-Second Timer

The signature interaction. Log time in 5 seconds. Keyboard-first. Workstream pre-fill from context. The thing that makes an operator use this daily.

Invoice System

Rate-aware roll-up from time entries. Inline line editor. Print-ready HTML preview with tokenized bank details. Approval workflow.

Client Portal

Separate route group — completely isolated from internal views. Project health, decisions (approve/reject), deliverables, invoices. What a PE partner sees.

Transcript Intelligence

Upload meeting transcripts. AI extracts action items, decisions, risks. Side-by-side review: raw transcript + extracted items. One-click save.

Steerco Generator

Assembles steering committee materials from work already done. AI polish with claim-matching (anti-fabrication). Diff against prior steerco.

Security & Compliance

RLS on every table. PII tokenization. Hash-chained audit log. GDPR Article-level mapping. DORA-readiness phased honestly. Built in, not bolted on.

The Numbers

MetricMission 1Mission 2Total
Build time~90 min~111 min~3 hours
Tickets1043 + 558
Files51154205
Lines of code3,39823,27126,669
Database tables1717
RLS policies3333
SQL migrations99
API routes121830
UI components05050
App routes/pages05959
TypeScript errors000
Human code written000

13.7x amplification. A 992-line mission spec produced 13,650 lines of production UI code. One page of intent, one working application.

Under the Hood

LayerTechnology
FrontendNext.js 15 App Router, React 19, TypeScript, Tailwind
BackendNext.js API routes, Supabase client
DatabaseSupabase (PostgreSQL 17), 17 tables, RLS, pgsodium tokenization
AuthSupabase Auth, SAML scaffolding, ABAC with tenant-scoped predicates
ArchitectureHexagonal (ports & adapters), 6 interfaces, provider-swappable
AuditSHA-256 hash-chained append-only log, tamper-evident
ComplianceGDPR (Art. 17/28/30/32), DORA-readiness, PII tokenization

What This Means

This isn't a demo. It's a production application — with tenant isolation, PII tokenization, compliance documentation, and a print-ready invoice system. Built in the time it takes to watch a movie. Twice.

The question isn't whether AI can build software. It can. The question is whether it can build software you'd trust with your clients' data, your firm's reputation, and your own professional credibility.

26,669 lines. 33 RLS policies. Hash-chained audit trail. Zero human code. The answer is yes — when the build is governed.

Screenshots

Application screenshots will be added after deployment and visual review.