A smattering of ideas and research learned at the Agile Alliance XP2018 conference in May, 2018, in Porto, Portugal.

1. XP 2018 Conference Portugal &
Various Learnings
Thene M Sheehy
July, 2018

2. Topics
 XP2018 – conference location – FEUP
 A bit about Porto – a mix of old and new
 What was the conference like?
 Experience Reports – available for anyone to access, or contribute!
 Experience Report - Scrum Master as Team Member
 Keynote topic 1 – Continuously Deploying Security
 Keynote topic 2 – 3X
 An interesting study about ANGER
 A bit about Mob Programming
 How to ‘dig in deeper’ with conference proceedings
 Where is Thene going next?

3. Research Center for Systems and Technologies
-CONTROL: Systems, Control, Optimization, and Estimation Technologies,
-NET: Networked Robotic Vehicles and Systems Technologies,
-ENERGY: Smart Energy Systems and Technologies.
300 participants
37 countries
Researchers & Practitioners

4. Porto
Pastel de Nata

5. Hot Topics
Sessions & OpenSpace
 Large Scale Agile
 Doctoral Research
 Lean Startups
 Experiential Learning in Startups
 Agile & HIPAA Regs (NHS England)
 Dev Ops
 Agile vs. the Architects
 Mob Programming
 Pair Programming
 Security & Mission-Critical Systems - How do
Agile practices support or hinder?
 Improving User Stories
 Improving Estimation
 IoT – XP-style – IoT as MicroServices

6. Experience Reports
The Agile Experience Report Program promotes the writing and timely
sharing of firsthand Agile experiences.
https://www.agilealliance.org/res
ources/experience-reports

7. Experience Report:
Scrum Master as Team Member
-Power Utility Project Accounting System
(defect fixes & enhancements)
• 12 hour work day was normal through 12
month project.
• PM was not agile-friendly, but agreed to let
the team try so long as client agreed.
• Client was willing and excited to see 2-
week progress.
• Dual role was not original intent, but team
requested this to help ensure success.
• Scrum tools were set up just before Sprint
1 (IntelliJ, Jira/Confl/Fisheye, etc.)
• Tried to add TDD, but team did not buy in.
• Tried to add Mob Programming, but team
also did not align.
• Allowed Mark to build skills in others.
• Required high social skills in Mark, along
with technical expertise.
• Dual role required balancing the
perspective of both roles.
• Exhausting but rewarding!
By Mark Rajpalhttps://www.agilealliance.org/resources/experience-reports/multiple-roles-scrum-master-as-a-team-member/
6-8 pm – dinner
9-midnight – coding ???!!!

8. Continuously Deploying
Security
 Security requirements are typically a non-
functional requirement vs. within a User Story
 Communication + Culture + Technology +
Education
 Security testing requires automated testing
 Feature Flags allow deployment of security
improvements and testing in production without
impacting customers
 Deployment needs to be automated to ensure
‘perfection’ and compliance
 Security features will be low on the Product
Owner backlog, but mandatory on the corporate
prioritization
 Protection Poker (Laurie’s PDF)
 Impact vs. ease of attack
 Microsoft Game: Elevation of Privilege
 Use Blameless Retrospectives (no guilt) - just
critical analysis of ‘what I did’ and ‘why it failed’ –
enables innovation and learning
 Automated Testing is critical
 Test for recovery AFTER failure
 Deploy AT PEAK LOAD as a great test!
Laurie Williams (Keynote Tuesday)
North Carolina State University
To understand the emerging practices
surrounding continuous deployment,
three annual one-day Continuous
Deployment Summits have been held at
Facebook, Netflix, and Google in 2015-
2017, where 16 companies have described
how they used continuous deployment.

9. Microsoft EoP
Card Game
A threat-modeling card
game for developers.

10. 3X Model
Kent Beck (Keynote Wednesday)
Three Rivers Institute
Kent shared a bit about his 3X model about
stages of a company, startup to maturity.
The 3X stands for Explore, Expand and
Extract. Across these three stages, a company
has changing priorities, coding standards,
and concerns.
Although a company might itself be very
mature, it can have exploration-stage
projects, and expand-stage projects,
alongside extract-stage.
The 3X phases frame the context in which certain values, principles and practices apply.
https://twitter.com/hashtag/3xt
hinking
And
https://ideas.riverglide.com/3x-
explore-expand-extract-
b9aad6402a5a
“Explore–the risky search for a viable return on a viable investment [via
experimentation]…If you’re lucky, one of these experiments turns out to be
unexpectedly successful, which leads to:
Expand–now things are going nuts… Unanticipated bottlenecks
appear… Once growth becomes routine, it’s time to:
Extract–now the shape of the problem and solution spaces
are clear. One euro in equals three euros out. Playbooks
emerge…Economies of scale matter…”

11. 3X Model – Digging Deeper
High
Agility
Scaling;
Security;
Stability;
UX Design
Optimized
Efficient
Kent’s Best Quote:
What if the waterfall guys aren’t idiots?
What if they’re just solving a different problem?
WhereThene’sRoleisToday.
Highlyoptimizedplans;SIPOCsforIT
Playbooksforrepeatablework

12. 3X Model – Implications to the Tech Debt Challenge

13. Emotions & Success of Code-Builds
Another tidbit from a research team:
Analyzing the CI Log from GitHub can
give insight to developer emotions
Anger is a significant variable for our
model, and higher levels of anger are
linked with failure builds.
Learning: Don’t make your Devs mad!
Arousal, dominance, sadness, joy, love –
these were not as significant.
Another paper on the same topic:
https://rodrigorgs.github.io/files/msr2017-
rodrigo.pdf

14. Mob Programming
for Learning
 Mobbing is like dancing
 Enables constant learning
 Pilot / co-pilot (if 2)
Pairing all the time is like being in a
relationship;
Mobbing all the time is like being in a
family.
What is your experience with mobbing and
pairing?

15. Lecture Notes / Proceedings
https://www.springer.com/us
/book/9783319916019

16. Where is Thene going???
And WHY???
• Adventure & Culture
• Low Cost of Living
• Great Healthcare
• Friendly People
• Digital Nomad friendly
• Accelerating the retirement timeline
• Access to the EU for more TRAVEL!

17. Not leaving Agile behind!
Stay in touch via LinkedIn: www/linkedin.com/in/TheneSheehy