AI-ASSISTED DEVELOPMENT F3 FRAMEWORK CASE STUDY

F3 FRAMEWORK BLOG

Your Lead Developer Just Quit. Your Codebase Has No Backup. What Do You Do?

By MethodFactory F3 Foundation-First Framework f3framework.com

It’s the scenario that keeps Business and Internet Systems Managers up at night.

The developer who built it is gone. The agency that managed it has been fired. And you’re standing in front of a live, business-critical website that no one on your team fully understands — and a stakeholder asking you to make a change to it by end of week.

This is not a hypothetical. It’s a situation MethodFactory was called into recently with a global organization doing over $1 billion in annual revenue. And it’s a situation that the F3 Framework — MethodFactory’s proprietary methodology for AI-assisted development — was built to handle.

THE SETUP: A BLACK BOX WITH A DEADLINE

The incoming brief was deceptively simple: update a custom Elementor SVG map component to reflect the organization’s new global headquarters location.

The transition document provided by the previous agency? A single folder path inside the Elementor components directory, with a note that essentially said update it there.

No documentation. No version control. No developer context. Just a folder, a file, and a live production environment.

For most development teams, this is where the risk calculus becomes uncomfortable. Do you open the file and start editing something you don’t understand? Do you bring in a new developer and hand them the same zero-context starting point? Do you leave it alone and tell the stakeholder it’s “too risky to touch right now”?

None of those answers is good enough. And none of them are how MethodFactory operates.

THE PROBLEM THAT FORCED A NEW METHODOLOGY

Here is the honest truth about AI-assisted development: the tools arrived before the process did.

Claude Code and the broader ecosystem of AI development tools are genuinely powerful — MethodFactory uses them every day. But powerful tools without guardrails and methodology produce the same failure modes over and over again.

F3 is the guardrails and methodology that AI coding and LLMs were missing — to keep development focused, in scope, and productive, and to stop the developer spin before it becomes damage.

Here are the six failure patterns MethodFactory kept seeing before F3 existed:

01

CONTEXT COLLAPSE

Every new AI session starts from zero. No memory of decisions made last week, code written last month, or the reasoning behind any of it. Without a structured documentation system, every session is archaeology before it’s development.

SESSION RECOVERY

02

SCOPING SKIPPED ENTIRELY

No Spec phase. No Plan phase. AI jumps straight to implementation — building the wrong thing quickly, confidently, and with no scope boundary to stop it. The missing Spec → Plan → Build sequence is the root of most blown engagements.

PHASE GATES

03

THE THRASH SPIRAL

When an approach isn’t working, AI tries again and again. A professional dev team stops, escalates to an architect, agrees on a better path, and proceeds. Without a mechanism to enforce this, AI just keeps spinning — breaking working code in the process.

THRASH DETECTION

04

DOCUMENTATION EVAPORATES

Without a system that forces documentation during execution, it doesn’t happen. Work gets done. Nothing gets written. The next session begins with no record that the last one ever occurred.

AUTO-DOCUMENTATION

05

LONG SESSIONS, ZERO RECORD

Extended development cycles without enforced checkpoints end with a pile of undocumented changes and no account of why any of them were made. F3 enforces documentation checkpoints at defined intervals throughout every session.

CHECKPOINT ENFORCEMENT

06

PRODUCTION STANDARDS ARE INVISIBLE TO AI
AI builds what works — not what’s production-ready. Security, accessibility, error handling, and logging are absent from default AI output. You could solve the first five failures and still ship an XSS vulnerability if your methodology doesn’t enforce Production Standards. F3 treats all four as non-negotiable pillars on every session.

PRODUCTION STANDARDS

MethodFactory built F3 because AI-assisted development needed professional guardrails and methodology — and none existed. Ten guardrails enforce the process on every session, including the Commit Gate (nothing committed without documentation verified), Handoff Readiness (project always in a state any developer can pick up), and Existing Project Protocol (inherited codebases require a full structured audit before development begins — no exceptions).

FOUNDATION FIRST: WHY WE DON'T TOUCH ANYTHING UNTIL WE KNOW WHAT WE HAVE

The name “Foundation-First Framework” isn’t marketing language. It’s a literal description of how we work.

The process started the same way every F3 engagement starts: download the project files, set up a structured local development environment in VS Code, and activate Claude Code. Then two steps that take less than five minutes and change everything that follows.

First: node setup-f3.js. The self-contained F3 installer deploys the full framework file structure into the project in a single command — framework core files, mechanical enforcement hooks, and the documentation layer scaffolding. It runs on macOS, Linux, and Windows.

Second: the F3 Existing Project Prompt — pasted directly into Claude Code. The prompt runs four phases automatically: assess the current state of the codebase, reverse-engineer a retroactive SPEC.md and PLAN.md from what was actually built, create the full documentation structure with all eight docs/ files populated from real codebase analysis, and present a summary of every finding and recommended priority — with an explicit approval gate before anything is changed.

WHAT WAS ACTUALLY IN THAT CODEBASE

The F3 audit surfaced four categories of issues before we touched anything:

CRITICAL

XSS VULNERABILITY

An active cross-site scripting flaw sitting in a file that no one had flagged, reviewed, or patched. For a $1B global organization, this is the kind of exposure that makes headlines.

MEDIUM RISK

DEAD & LEGACY FILES

Files that served no current function but remained in the codebase, creating noise, confusion, and potential surface area for bad actors.

MEDIUM RISK

NO ACCESSIBILITY HANDLING

None. A global organization’s digital component with zero accommodation for users with disabilities — both an ethical gap and a legal liability.

HIGH RISK

ZERO DOCUMENTATION

Nothing to tell a new developer what the component did, how it worked, or how to safely modify it. The codebase was a complete black box.

Every finding was logged in the F3 dev log with location, context, and remediation path — before a single production change was made.

THE FOUNDATION DOCUMENT

Before a single line of code is written in any F3 engagement, the project gets its Foundation Document.

This is not a template or a boilerplate README. It is a structured, project-specific record that captures everything an incoming developer needs to orient immediately: the project brief and business purpose, the full tech stack inventory (in this case, WordPress, Elementor, WP Engine, plugin versions, and the custom component architecture), scope definition, and a plain-language summary of the risk surface identified during the audit.

For this organization, the Foundation Document was also their first experience of actually owning their own codebase in a meaningful way. They went from a folder path and a vague note to a document that told them exactly what they had, what it depended on, and where the boundaries of safe modification were.

WHAT F3 ACTUALLY DEPLOYS INTO THE PROJECT

F3 deploys directly into the codebase as working files and executable scripts — not a methodology document kept in a binder somewhere.

LAYER 01 — FRAMEWORK CORE
THE METHODOLOGY FILES

Nine root-level files including CLAUDE.md, the session bootstrap that Claude reads first when any new session opens. Context survives across sessions not through AI memory — but through a file that lives in the project and is updated at the close of every session. Also deployed: SPEC.md and PLAN.md enforcing the phase gates.

LAYER 02 — MECHANICAL ENFORCEMENT
THE HOOKS THAT RUN

Three scripts running inside .claude/hooks/ on macOS/Linux and Windows — not suggestions, but code that runs. The Restart Gate intercepts runaway sessions. The Commit Gate blocks commits that don’t meet documentation and Production Standards requirements. The Thrash Detector forces a structured stop when spinning is detected.

LAYER 03 — PROJECT DOCUMENTATION
THE LIVING RECORD

Eight structured documents in docs/: architecture, API contracts, tech stack, architecture decision records, a crash-recovery checkpoint, dev log, task tracking, and the release changelog. Updated every session. When the next session opens, Claude reads them first.

THEN WE GOT TO WORK

With the foundation established, execution was clean.

The XSS vulnerability was patched and documented. Dead files were removed. Accessibility handling was added. Every change was logged in the change log with enough context that any developer — or AI assistant — could understand exactly what was done and why.

Then came the originally requested task: add the new global headquarters location to the SVG map component. With the codebase now understood, documented, and cleaned up, this was the straightforward task it was always supposed to be.

When the session was complete, we closed it using F3’s Session End Prompt — a structured wrap-up that triggers a final documentation pass. Claude produced a complete summary of every action taken during the session, every file changed, and every decision made. All changes were committed to Git with meaningful commit messages.

WHAT WAS HANDED BACK

The organization came in with a black box. They left with an asset — and a complete documentation suite.

The Foundation Document gives any developer immediate orientation. The dev log records every session’s activity, decisions, and rationale. The change log captures every code change — file, nature of change, reason made. The session end summary provides a plain-language account of exactly what happened. The Git history ties all of it together with traceable commits.

The next time this organization needs to update that map component, modify anything in the codebase, or onboard a new developer — whoever picks it up starts with full context. No archaeology. No “let me spend a week figuring out what this does.” The project is ready on day one.

Documentation is not an afterthought. It’s a byproduct of execution.

WHERE F3 FITS IN THE AI DEVELOPMENT LANDSCAPE

If you search for AI-assisted coding frameworks today, you will find a sophisticated and fast-moving market. Cursor, Windsurf, GitHub Copilot, Claude Code, LangGraph, CrewAI, AutoGen — powerful tools, all of them.

What none of them provide is a professional methodology for how to use them on real client projects — with real accountability, real documentation, real phase gates, and real guardrails against the failure modes that make AI-assisted development unpredictable.

That is the layer F3 occupies. And until MethodFactory built it, that layer did not exist. Tools like Encore and Intent solve adjacent problems at the tool level. Neither enforces a Spec → Plan → Build sequence, detects thrashing, or produces the documentation suite that gives every F3 engagement a permanent, reviewable record from day one.

Every tool on the AI coding landscape makes development faster. F3 makes it professional.

THREE QUESTIONS WORTH ASKING ABOUT YOUR CODEBASE TODAY

If you’re responsible for the successful delivery of digital products at your organization, these are the questions that matter:

1

If your lead developer left tomorrow, how long would it take a new developer to make a safe, informed change to your most critical component?

2

When was the last time your codebase was audited for security vulnerabilities by someone other than the person who wrote it?

3

Does your current development process produce documentation as a byproduct of execution — or does it treat documentation as a separate, deferrable task?

If any of those answers make you uncomfortable, that’s the right signal.

BUILD ON A FOUNDATION THAT HOLDS.

MethodFactory specializes in AI-assisted development built on the F3 Foundation-First Framework. Whether you need emergency rescue on an inherited codebase, ongoing structured development support, or a methodology your team can adopt and scale — we can help.

WORK WITH METHODFACTORY

EXPLORE THE F3 FRAMEWORK

/ / IN THIS ARTICLE

The Setup: A Black Box
Six Failure Patterns
Foundation First
What Was in the Codebase
The Foundation Document
What F3 Deploys
Execution
What Was Handed Back
The AI Landscape
Three Questions

/ / F3 BY THE NUMBERS

6+ AI FAILURE MODES SOLVED
10 GUARDRAILS ENFORCED PER SESSION
3 PHASE GATES: SPEC → PLAN → BUILD
0 RE-ONBOARDING REQUIRED PER SESSION

/ / 10 GUARDRAILS

G-01
Foundation Before Code
G-02
Thrash Detection
G-03
Scope Enforcement
G-04
Session Close Protocol
G-05
Mid-Session Checkpoints
G-06
Production Standards
G-07
Commit Gate
G-08
Handoff Readiness
G-09
Existing Project Protocol
G-10
Multi-Agent Review Model

/ / ABOUT F3

F3FRAMEWORK.COM