BOOKS DEEP-READ · ACCELERATE · CH 1
Accelerate: The Science of Lean Software and DevOps · Ch 1 · Forsgren, Humble & Kim · 2018
Some apps on your phone update every week; others sit untouched for six months. Chapter 1 of Accelerate asks a question that sounds vague but turns out to be countable: can you actually measure how good a team is at delivering software? The authors' answer is yes — and the number you get predicts whether the company makes money.
Common sense says the more often you ship, the more often you break things — which is why so many companies ship rarely, ship slowly, and pile on approvals. Four years of data and 23,000-plus survey responses say the opposite: the teams that ship most often break production less, and recover faster when they do. It's like driving: the person who drives twice a year scrapes the car more often than the one who drives daily.
To answer "how should we improve?", you used to have exactly two things. One was a guru's war story from a conference — it worked at their company, which says little about yours. The other was a maturity model: an exam you climb, level 1 to level 5, and once you're certified the transformation is declared a success. The trouble is that improvement stops the day the certificate arrives — and the thing being counted is how many tools you installed, not how fast or safely you actually deliver.
The book swaps the paradigm: not a maturity certificate, a capability check-up. An exam means everyone walks the same path and it ends at the top. A check-up means finding whichever part of you is weakest right now, treating that, then measuring again. It never ends, and no two companies get the same next step.
So what do you check? Four numbers any team can report: how often you ship, how long it takes from finishing the code to it being live, what fraction of releases break something, and how long it takes to recover. The first two say "fast"; the last two say "safe". Sort thousands of teams by those four and the fast group and the safe group turn out to be the same group — which is the evidence for the strange thing above.
It comes down to how much you move at once. Moving house in one truckload looks efficient, but if that truck tips you lose everything, and you have no idea which box crushed which. Ten small trips are light, obvious when something goes wrong, and cheap to redo. Shipping software is the same: ship often and each change is small; small changes break less, are easier to diagnose, and are cheap to undo. "Willing to ship" and "not breaking things" don't fight — they feed each other. The reverse is a vicious circle: save up three months, ship a whole truck, have no idea what broke, and grow even more afraid of the next release.
It hands engineers and executives a shared language they can sit down and use: stop arguing about whether "we're doing well" and just put the four numbers on the table, then go after the weakest one. That said, these findings come from surveys rather than controlled experiments, and the moment those four numbers become performance targets people will game them — so treat them as a health check, not a KPI.
"Delivering fast" and "delivering safely" are not a choice between two things; the data says they are the same thing done by the same teams — and the trick is making each change small. To improve, don't climb levels and collect certificates: measure, find your own weakest link, fix that one, then measure again.
Want the research method, the actual magnitudes and the diagrams? → switch to Deep
Chapter 1 of Accelerate teaches no individual practice; it lays the book's methodological foundation: software delivery performance is not a feeling but a measurable quantity, and once measured it predicts organizational performance. To improve it you must abandon the industry's habitual maturity model and adopt a capability model — not climbing to level 5 and declaring victory, but repeatedly finding the weakest lever you currently have, moving it, and measuring again. The counterintuitive line: speed and stability are not two ends of a seesaw; the data says they are the same thing done by the same teams.
This is the opening chapter of Part I ("What we found") and the book's credentials page. The book is the academic write-up of four State of DevOps Reports from 2014–2017, run by Nicole Forsgren's DORA team with industry partners, covering 23,000+ survey responses across 2,000+ organizations. The chapter offers no list of practices — that's Ch4 (technical practices), Ch5 (architecture), Ch3 (culture). It settles two prior questions first: why you should believe any of this, and what paradigm a transformation should run on. Ch2 then breaks delivery performance into four operational metrics. The real-world scene it maps to: any kickoff meeting about whether to do a DevOps transformation and how you'd know it worked.
Around 2018, almost every claim about "how to deliver software properly" was anecdote or vendor pitch: a unicorn's engineering blog, a guru's conference talk, a supplier's white paper. Their shared defect is that they are unfalsifiable — that approach worked under their constraints, which tells you little, and when your copy fails you can't say which step was wrong.
Meanwhile the only respectable tool available to an organization that genuinely wanted to improve was the maturity model, so the standard transformation script became: fund it, buy tools, tick the level boxes, reach Level 4, declare success. What if you don't fix this? You spend tens of millions, fill a building with tooling, get certified — and still deliver slowly, with nobody able to say which link is the problem, because nothing you measured was a delivery outcome. This chapter fills both holes at once.
The difficulty is that delivery performance isn't like clock speed — you can't read it off. The authors borrow from social science and treat it as a latent construct: you can't put a ruler on "intelligence", but you can measure several observable indicators that move together and then confirm statistically that they really do point at one underlying thing.
Picking those indicators, the authors set two rules that are worth more than the indicators themselves: first, they must cover both speed and stability — measure only one side and you will drive teams straight into the pit on the other; second, they must measure global outcomes, not local output — "lines of code" or "story-point velocity" measure an individual's workload, and the moment such a number is used for appraisal it gets optimized at the expense of the whole. What survives is four: deployment frequency and lead time for changes (speed), change failure rate and time to restore (stability). Ch2 defines each.
With those four numbers, cluster analysis sorts respondents into high, medium and low performers. The point isn't that there are three tiers; it's that the boundaries weren't chosen by the authors — the data produced them, and four years running the structure came back stable. That is what makes this a reproducible finding rather than one more opinion.
Line the three tiers up against self-reported commercial outcomes and you get the book's most-quoted result: high performers are twice as likely as low performers to meet or exceed their goals on profitability, market share and productivity. And this isn't only a listed-company story — for government and non-profits, swap the outcomes for quantity of goods and services, operating efficiency, customer satisfaction and mission attainment, and the conclusion holds.
One word deserves scrutiny: the book says predict, not "correlate". Statistically that means inferential predictive modelling, not a scatter plot with a hopeful eyeball. But don't over-read it either — this is a cross-sectional survey, not a randomized controlled trial: it can say the two things are strongly bound and the direction is discernible; it cannot establish strict causation (the authors concede the boundary in Part II; see the pitfalls section).
The real weight is that it changes which table the conversation happens at: it drags "how the technology team works" out of cost-centre language and onto a page a board can read — before this, investment in engineering effectiveness competed with marketing spend while being unable to state a return.
The traditional assumption is written into countless company processes: to be safe, ship less, ship slower, add approvals. The data says the reverse — high performers lead on all four metrics: more frequent deploys and shorter lead times, and lower change failure rates and faster recovery. Speed and stability correlate positively; there is no seesaw. In the 2017 figures the book cites, high performers beat low performers by 46× on deployment frequency, 440× on lead time and 96× on recovery speed, with a 5× lower change failure rate — the same teams winning all four.
The mechanism collapses into one phrase: batch size. Lean manufacturing has known for decades that smaller batches mean less work-in-progress, defects surfacing earlier, and cheaper rework. Transplanted into software it becomes a self-reinforcing loop:
Run it backwards and "ship rarely, slowly, with approvals" is a vicious loop: three months of accumulation means an enormous batch with stacked risk, nowhere to start when it breaks, and therefore more fear and longer accumulation next time. The heavier the approval process, the higher the actual risk — that is the single most valuable counterintuitive line in the chapter.
The chapter spends real space arguing something that was fairly offensive at the time: do not run a technology transformation on a maturity model. Three counts —
The capability model it contrasts has four advantages: ① outcome-based — define the outcome you want first, then ask which capabilities move it; ② multidimensional and dynamic — each team takes a path shaped by its own bottleneck and adjusts over time; ③ continuous improvement is built in — there is no "done" box; ④ it identifies differentiating levers and supports "what if we changed this?" reasoning — not "everything matters", but from where you stand now, which lever pays best.
In practice the paradigm swap replaces one very concrete action: stop copying other people's list of practices. Netflix's stack works at Netflix because that happened to be Netflix's constraint. Your job is to measure, find your constraint, and pick the capability that moves it.
Four years of research converge on 24 key capabilities in five groups: continuous delivery (version control for everything, test automation, deployment automation, trunk-based development, continuous integration…), architecture (loose coupling, team autonomy), product and process (small batches, customer feedback, visibility of work), lean management and monitoring (lightweight change approval, monitoring, proactive notification, WIP limits) and culture (Westrum's generative culture, a learning climate, collaboration, job satisfaction). Later chapters take them one at a time.
Strung together they form the skeleton of the whole book: capabilities → software delivery performance → organizational performance. Hanging off the side is a claim that gets overlooked: high performance comes with lower burnout and higher job satisfaction — improving delivery performance improves the human situation; it is not bought by grinding people down.
One more conclusion the chapter states and readers routinely skip: there is no "we're a traditional enterprise, so we can't" exemption. High performers in the sample span every industry and size, including heavily regulated finance and government, and including old companies carrying large legacy systems. The constraint is in the capabilities, not in the industry label.
Table 1 · Maturity model vs capability model: you are really choosing a shape of improvement
| Maturity model | Capability model (this chapter) | |
|---|---|---|
| Core question | What level are we at? | What is our weakest link right now? |
| Terminus | Yes — certified means done | None — continuous improvement |
| Path | Lockstep, uniform, one road for all | Multidimensional, dynamic, per-team bottleneck |
| What it counts | Activities and tools (installed? meeting held?) | Outcomes (delivery → organizational performance) |
| Typical failure | Improvement stalls after certification; every box ticked, delivery still slow | Measurement itself costs; the metrics get gamed once used as KPIs |
| Honest cost | Cheap, easy to report, audit-friendly | You must sustain a measurement practice, and the answers are company-specific and uncopyable |
| Fits when | Compliance or procurement genuinely needs a level label | You actually want delivery outcomes to change |
Table 2 · Portraits of the three tiers on the four metrics (2017 State of DevOps data as cited in the book)
| Metric | High | Medium | Low |
|---|---|---|---|
| Deployment frequency | On demand, many times a day | Once a week to once a month | Once a week to once a month |
| Lead time for changes | Less than one hour | One week to one month | One week to one month |
| Time to restore service | Less than one hour | Less than one day | One day to one week |
| Change failure rate | 0–15% | 0–15% | 31–45% |
One detail in that table is worth pausing on: medium and low land in the same band on the first two rows. The book discusses this explicitly — medium performers are often stuck in a middle layer, already committing frequently but not yet rid of heavyweight approvals and manual rework, so the payoff from speed hasn't arrived while the risk already has. Transformations hurt in the middle, not at the start.
Table 3 · Which lever first? (the chapter's method turned into an action)
| Your symptom | Likely constraint | Where to push next |
|---|---|---|
| Releases need a slot and three layers of sign-off | Heavyweight change approval | Swap for peer review plus automated gates, then watch lead time actually fall |
| You ship reasonably often but each release breaks something | Thin test and deployment automation | Build out automated tests; make deployment repeatable and reversible |
| Changing one thing drags in other teams | Architectural coupling | Loose coupling and team autonomy: can you release without coordinating? |
| All four numbers look good but people are burning out | Too much work-in-progress / culture | Limit WIP; look at the Westrum culture dimension |
| You don't know which tier you're in | You aren't measuring at all | Start with the four metrics — this is the chapter's first claim |
This chapter became the default reference for a decade of "engineering effectiveness" argument because it turned the shouting match over whether DevOps works into a research programme that can be reproduced and falsified, and handed over four numbers any stack and any industry can report. The "DORA four keys" you see today on GitHub, GitLab, Azure DevOps and Google Cloud dashboards start here; the DORA team was acquired by Google Cloud in 2018 and the research has run ever since.
1.5% and delivery stability by an estimated 7.2%. Their reading: "improving the development process does not automatically improve software delivery — at least not without proper adherence to the basics of successful software delivery, like small batch sizes and robust testing mechanisms." — the best possible footnote to this chapter's "don't copy the tool list, watch the outcome".Google Cloud Blog, "2024 DORA Report" ↗11.6 seconds on a weekday, with peaks above 1,000 deployments in a single hour — extreme deployment frequency and extreme scale can coexist, one of the earliest public data points for "fast does not have to buy instability".Source: Jon Jenkins, "Velocity Culture", O'Reilly Velocity 2011 keynote (video source not directly linkable here, so cited in text only)① In one line: this chapter is the book's methodological foundation — delivery performance is measurable and predicts organizational performance; improve it with a capability model, not a maturity model.
② The evidence base: four years, 2014–2017, 23,000+ responses, 2,000+ organizations across industries and sizes — the answer to "why believe this".
③ The method: delivery performance is a latent construct, characterized by four observable metrics (deployment frequency, lead time, change failure rate, time to restore), with cluster analysis letting the data produce the tiers. Two rules for picking metrics: cover speed and stability both; measure global outcomes, never local output.
④ The counterintuitive result: fast and safe move together — high performers lead on all four. The mechanism is the virtuous loop built on batch size; ship-rarely-and-approve-heavily is the vicious one, so the heavier the approval, the higher the actual risk.
⑤ The commercial weight: high performers are twice as likely to meet or exceed goals on profitability, market share and productivity; non-commercial organizations get the same result with outcomes redefined.
⑥ The paradigm fight: three counts against maturity models (terminal thinking, lockstep uniformity, counting activity not outcomes) versus four advantages of capability models (outcome-based, multidimensional and dynamic, continuous improvement, differentiating levers).
⑦ The causal chain: 24 capabilities in five groups → software delivery performance → organizational performance, with lower burnout on the side — and no "our industry is special" exemption.
⑧ The action worth remembering: measure first, find your own constraint, and stop copying other people's list of practices.
⑨ The misuse worth guarding against: the four metrics are a diagnostic, not a KPI; and this is survey research — DORA itself later added a fifth metric. A good start, not the last word.