Robert Encarnacao AI transformation leadership

Also offered · Software portfolio analysis

Every modernization estimate is a guess until someone reads the code.

Modernization programs get approved on a story: what the system does, how bad the code is, how long a rewrite would take. The story is usually wrong in two or three places that matter, and nobody finds out until the budget is spent.

This is a service I offer alongside my main work in AI transformation leadership. It comes from fifteen years of leading the assessments that come before the money: two to four weeks of reading the code, working sessions with the people who live with it, and a decision both sides can defend. Single applications and whole portfolios, from VB6 and PowerBuilder to multi-million-line suites.

If you are deciding what to do with a legacy estate, this is how I would run the assessment. The panel shows how a portfolio gets triaged, and what changes once the code is read.

Who this is for
Leaders deciding what to modernize Software vendors with an aging product Teams that inherited a legacy estate Hiring managers who want to see how I work
Three steps · 60 seconds

Where each application should go, and why the first answer is often wrong

Applications
8
Moved by evidence
Not yet
Decided by
Migrate0
Rewrite0
Replace0
Sustain0
    Three questions, in this order, for every application. The order matters as much as the answers.

    Six steps, two gates

    The steps never change. What goes into them is tailored to the company, the people in the room and the project that follows.

    Before kick-off
    First call01

    Qualify the question

    Who owns the code, what it does, where they want to take it, how much help they want, and who signs. Seven questions every time, then as much background as the conversation allows.

    You get
    A qualification summary, and a clear read on what kind of decision this is.
    Before signature02

    Put the scope in writing

    Which applications, how large, which screens get a proof of concept, how long it takes and what it costs. Anything vague here becomes an argument in week three.

    You get
    A signed scope with a size cap and a proof-of-concept target.
    Before kick-off03

    Line up three goals

    The company's goal, each stakeholder's goal, and the decision the assessment must support, checked against each other. Then onboarding, the right people booked, and a first scan of the code before anyone meets.

    You get
    A stakeholder map, tailored session agendas and a first scan.
    Gate 1

    No kick-off until the build compiles and runs, the goals agree and the right people are booked.

    The assessment
    Day 104

    Kick off with the doubts on the table

    Why now, what has been tried before, what success looks like, and who is quietly against it. Confirm the agenda and which add-on modules apply.

    You get
    Agreed goals, success criteria and an agenda everyone has seen.
    Week 105

    Work through it with the people who know

    A fast technical demo, not a training session. Current architecture, testing and release, the target, and the business constraints, with a checkpoint at the end of every day.

    You get
    Session notes: what was confirmed and what is still open.
    Weeks 1 – 306

    Read the code

    Automated scans of the whole codebase, a trial migration, a proof of concept on the hardest screens, and a manual deep dive wherever the risk actually lives.

    You get
    An inventory, complexity and readiness ratings, a component strategy and the risks.
    Gate 2

    The customer confirms the findings before anything is priced. Then come the report and the options.

    Same steps, different questions

    Every customer gets the core. Add-ons join only when the first call or the first scan says they matter.

    The core, every time
    • Business contextGoals, why now, what has been tried, who decides
    • Environment and accessA build that compiles and runs, tools installed, complete source
    • Application and usersWhat it does, who uses it, the hardest screens
    • The code baseSize, languages, shared and dead code, dependencies
    • Architecture and integrationsData access, external systems, third-party components
    • Testing and releaseTest assets, coverage, release cadence, how fast the code changes
    • Target and standardsStack, versions, UI direction, who signs off
    • Project constraintsDeadlines, people, rollout, regulation
    Add-ons, when they matter
    • Native and custom codeC and C++ layers, custom libraries, screens built from metadata
    • ReportsReport engines, and the business logic hiding inside them
    • Data and shared schemasOther systems reading and writing the same tables
    • Security and complianceVulnerability patterns, secrets in code, the regulations in force
    • UX and workflowThe habits power users will not give up
    • Performance baselinesTimings for the transactions that matter, before anything moves
    • Alternative targetsMore than one destination, compared side by side

    Who is buying changes the emphasis

    A software vendor

    Protect the roadmap.

    Release cadence, what customers will notice, and a team that keeps shipping while the platform moves.

    An enterprise

    Change nothing users can see.

    Like-for-like behaviour, minimal retraining and a cutover nobody notices.

    An integrator

    Draw the lines clearly.

    A fixed scope, known dependencies and a clean boundary between their work and ours.

    A team doing it themselves

    Get them ready, then step back.

    The tooling, a readiness check and a second opinion on the plan.

    When it is a portfolio, not an application

    The decision is made one application at a time, while looking at the whole estate.

    1. 1

      Inventory everything

      Size, languages, owners and dependencies for every application, including the ones nobody admits to owning.

    2. 2

      Map what is shared

      Shared code is often a large part of the total. It changes the order of everything, so it is mapped before anything is scored.

    3. 3

      Ask three questions

      How unique is it to the business, how fast must it change, and how sound is the code. Asked in that order.

    4. 4

      Decide the destination

      Migrate, rewrite, replace or sustain. Doing nothing is a legitimate answer, as long as it comes with a date.

    5. 5

      Sequence the waves

      Shared code first, the longest job started early, and the rest in parallel as far as testing capacity allows.

    The panel at the top runs steps three to five on an eight-application sample. Try it yourself.

    Four rules I assess by

    In the order they tend to get broken.

    I

    No kick-off before the build works. An assessment that starts without compiling code and complete source spends its budget waiting.

    II

    The first story is a hypothesis. When the code disagrees with the meeting, the code wins and the plan changes.

    III

    Line up the goals before the first session: the company's, each stakeholder's and the assessment's own. Otherwise the report answers the wrong question.

    IV

    Confirm before you price. The customer signs off the inventory and the findings, so the estimate rests on facts both sides accept.

    How the method has changed

    The same discipline, applied to a wider question each time.

    1. 2014

      Code first

      Line counts, control mappings and effort by phase. The question was how to convert.

    2. 2017

      The people in the room

      Strengths set next to risks, written for the people who would live with the result.

    3. 2023

      One standard

      A single report structure, automation readiness measured rather than promised, and every assumption written down.

    4. 2025

      Modernization, not conversion

      Several target options side by side, AI-assisted code transformation where no tool exists, and security and compliance mapped.

    15
    Years leading customer-facing modernization
    38
    Fortune 500 companies advised
    20M+
    Lines of code assessed
    8
    Source technologies, from VB6 to Informix 4GL

    Two ways to use this

    The same method, whichever side of the table you are on.

    If you are modernizing

    Send me the list

    The applications you are weighing, even a rough list with sizes and languages. You get a written read on where I would look first, whether or not anything follows.

    If you are hiring

    Ask me to defend any step

    Pick a step or a rule on this page and ask what happens when someone skips it. Thirty minutes is enough to find out whether this is how you want the work done.