Executive Summary

Modernizing a decades-old codebase is one of the highest-stakes undertakings an enterprise can attempt. The arrival of capable coding assistants has tempted many teams to treat modernization as a translation problem: feed the old code to a model, ask for the new code, and ship the result. This whitepaper argues that this framing is fundamentally flawed for large systems and frequently disastrous in the long run.

Standalone chatbots such as general-purpose coding assistants are powerful, but using them directly to convert millions of lines is still a manual, fragmented, and inconsistent process. They have no durable memory of the whole system, no enforced consistency across thousands of files, and no built-in discipline to separate genuine business intent from decades of accumulated technical clutter. An as-is conversion faithfully reproduces that clutter in a modern language, carrying forward dead code, redundant patches, and obsolete rules at full cost.

We advocate a different model: build a structured repository from the source code, use large language models for inference and business-rule derivation against that repository, and insert a human-reviewed sanity gate before any artifact is allowed to shape the target architecture. This converts an ad-hoc chat exercise into a governed, repeatable pipeline that maximizes return on investment and produces a system fit for modern business dynamics rather than a faithful copy of yesterday's constraints.

This is also the System Integrator's perspective. An SI is accountable not for demonstrating AI capability but for delivering predictable outcomes, reduced transformation risk, faster time-to-value, regulatory compliance, and business continuity. Industry experience consistently shows that 60–70% of modernization effort is spent understanding existing business logic rather than writing new code — and most failed programs fail precisely there: hidden rules are missed, dependencies are misunderstood, and target designs rest on assumptions. The right question is therefore not which model to use, but what combination of capabilities gives clients the highest probability of success. The answer is increasingly LLMs + a Business Rule Extraction (BRE) platform + SI domain expertise.

Don't translate legacy code — understand it, clean it, and rebuild it — with LLMs accelerating each stage inside a disciplined, auditable pipeline.

The Evidence: Two Gaps That Doom Modernization

The case for discipline is not theoretical. Two well-documented failure patterns sit on either side of a naive, chatbot-only conversion: the pilot-to-production gap — where AI initiatives stall in proof-of-concept and never ship — and the understanding gap — where modernization loses the business logic it was meant to preserve.

Gap 1 — AI Pilots That Never Leave the Lab

4 of 33
AI proof-of-concepts that reach production — an 88% stall rate
IDC, AI CIO Playbook 2025
95%
GenAI pilots that fail to deliver measurable ROI
MIT Project NANDA, State of AI in Business 2025
>80%
AI projects that never reach production at all
RAND Corporation
30%
GenAI projects abandoned after proof-of-concept by end of 2025
Gartner forecast
>40%
Agentic AI projects expected to be canceled outright by end of 2027
Gartner forecast
17 → 42%
Rise in enterprises abandoning most AI initiatives, 2024 to 2025
S&P Global

The consistent finding across these studies is that the model is rarely the problem. Pilots succeed in insulated conditions — narrow scope, curated data, humans quietly bridging the gaps — and collapse when production removes those buffers. Translated to modernization: an impressive chatbot demo on one program is not evidence that the approach scales to a portfolio.

Gap 2 — Modernization That Loses the Business

74%
Organizations that started a legacy modernization project but failed to complete it
Advanced, Mainframe Modernization Barometer
68%
Legacy modernization projects that fail outright or fall short of expectations
Industry research, 2025
83%
Data migration projects that fail or materially exceed budget
Gartner

Crucially, the root cause in this bucket is not technical — it is the loss of semantic context: rules, exceptions, and regulatory classifications embedded in the code and documented nowhere else. This is precisely the knowledge a line-by-line conversion discards.

Why the Naive AI-Rewrite Makes Gap 2 Worse

The closest evidence to the specific risk of chatbot-only conversion concerns verifiability. The danger is not that AI writes wrong code — it is that AI-generated code for a complex legacy system is unverifiable without the very business understanding the original system lacked. If no one knows what the legacy system did in its corner cases, no one can confirm the rewrite handles them. The organization simply trades an opaque old system for an opaque new one in a more modern language.

72%
Automated tests in legacy migration reported as false positives — they pass but don't reflect production behavior
Developer-productivity analysis (reported)
1 in 5
Enterprise security breaches now linked to AI-generated code
Industry research, early 2026
69%
Security leaders who found serious vulnerabilities in AI-produced code
Industry research, early 2026

What the Numbers Tell Decision-Makers

  • Demos don't scale: an 88–95% pilot-stall rate means an impressive chatbot conversion of one module is no predictor of portfolio success.
  • Completion is the exception: with 68–74% of modernization efforts failing or stalling, the default outcome without discipline is failure.
  • "Passes tests" ≠ "verified": when most migration tests can be false positives, an AI rewrite that passes its suite is a system whose failure modes are simply unknown until production.

1. The Allure and the Limits of Direct Chatbot Conversion

It is easy to demonstrate a coding assistant translating a single COBOL paragraph into Java or a PL/SQL routine into Python. That demo creates a misleading impression: that the same approach scales linearly to an entire portfolio. It does not. The challenges of large-scale modernization are not the challenges of translating one file; they are the challenges of coherence, completeness, and consistency across millions of interdependent lines.

1.1 The Context-Window and Memory Ceiling

A legacy system of any consequence spans thousands of programs, copybooks, includes, stored procedures, JCL, and configuration. No interactive chat session can hold the entire system in view at once. Work proceeds file-by-file or fragment-by-fragment, and the assistant has no durable memory of decisions made in earlier sessions. The same data structure may be translated three different ways in three different conversations, because nothing enforces a single source of truth across the effort.

1.2 It Remains a Manual, Human-Paced Process

Direct chatbot conversion feels automated but is, in practice, heavily manual. A human must decide what to paste in, frame the prompt, judge the output, copy it back, reconcile it with neighboring code, and repeat — thousands of times. Throughput is bounded by human attention, and quality varies with prompt phrasing, the engineer's fatigue, and which fragment happened to be in context. The result is a process that is neither consistent nor reproducible, and that cannot be audited after the fact.

1.3 Inconsistency, Drift, and the Silent-Error Problem

  • Naming and structural drift: equivalent constructs are modernized differently across the codebase, fragmenting what should be shared components.
  • Lost cross-references: a change in one program's behavior has downstream effects the assistant cannot see, because those callers were never in context.
  • Confident but wrong output: models can produce plausible code that subtly alters a business rule. Without a system-wide rule baseline to check against, these silent errors survive into production.
  • No traceability: there is no automatic link from a line of new code back to the legacy logic and business rule it implements, making validation and audit extremely costly.

These are not model deficiencies — they are methodology deficiencies. Enterprise modernization demands completeness, traceability, validation, governance, and repeatability. A coding assistant supplies intelligence, interpretation, and pattern recognition; it does not supply the operational framework that lets those capabilities be applied safely and consistently across thousands of applications.

1.4 Audit and Compliance: The Un-Auditable Process

Perhaps the most consequential limitation of using a general-purpose assistant directly is that the process is not auditable, and therefore not compliance-proof. Telling a regulator "we generated the requirements from the code in plain English, capturing all the important business rules" is not evidence. Defensible, automated requirements generation and modernization demands a complete, reconstructable record of how every artifact came to be: the prompts used, the data in and out, and the additional resources, system information, and context that shaped each result. A chat session preserves none of this in a usable form.

  • Prompt lineage: every prompt and instruction that produced or revised an artifact, in sequence.
  • Data lineage: the exact inputs consumed and outputs produced at each step, traceable back to the source code.
  • Context and resources: the system information, reference material, and supporting context supplied to the model.
  • Parity and source-use checks: built-in verification that the output is grounded in the source, reducing hallucination.

Assembling this trail by hand around a chat workflow is laborious enough to defeat the speed the assistant was meant to provide. Purpose-built tooling, by contrast, captures the complete audit trail and data lineage automatically, making the output auditable and compliant by construction. The same machinery delivers consistency across thousands of artifacts, and the built-in parity and source-use checks make the output solid and far less prone to hallucination — giving the end client real confidence in the result. Modernizing a business-critical system, a team simply cannot afford to absorb this audit and compliance risk by forgoing the right tool for the work.

Chatbots are excellent accelerators for bounded, well-framed tasks — but used alone on a large estate they deliver an inconsistent, manually-driven, un-auditable conversion. The intelligence is real; the process discipline is missing.

2. Why As-Is Conversion Is Dangerous

Legacy systems are not clean expressions of business intent. They are geological records — built over decades, by many hands, under deadlines, regulatory shifts, mergers, and platform migrations. Each layer left sediment: workarounds, patches, dead branches, and rules that made sense for a business that no longer exists.

2.1 What Accumulates in a Decades-Old Codebase

Accumulated Artifact How It Got There Cost of Carrying It Forward
Dead codeFeatures retired but never removedMaintenance burden; confusion; false test coverage
Redundant patchesRepeated hot-fixes for similar issuesMultiple inconsistent rules for one concept
Obsolete rulesPolicies, products, or regs long discontinuedModern system enforces yesterday's constraints
Technical plumbingFile handling, paging, platform quirksMistaken for business logic and preserved
WorkaroundsCompensating for old platform limitsMeaningless on modern infrastructure

2.2 As-Is Conversion Preserves the Wrong Things

A faithful, line-for-line conversion treats all of this sediment as if it were essential. The clutter is re-expressed in a modern language at full migration and testing cost, and the organization pays again to maintain it indefinitely. Worse, plumbing built to compensate for legacy platform limits is often indistinguishable, to an automated translator, from real business logic — so it is preserved with equal fidelity, permanently fossilizing constraints the business has already outgrown.

You spend a fortune to arrive at a modern-looking system that behaves exactly like the old one — same hidden rules, same clutter, same constraints — now harder to question because it looks new. As-is conversion migrates the problem, not just the code.

3. The Rule-Driven Alternative: Extract, Sanitize, Rebuild

The path to maximum ROI is not to translate code but to recover the business it encodes, clean that knowledge, and rebuild on a target architecture designed for today. The unit of value is not the line of code; it is the business rule and its associated process.

3.1 Build a Repository, Not a Chat History

Instead of pasting fragments into a chat, the source code is ingested into a structured, queryable repository — programs, call graphs, data flows, copybooks, and dependencies. LLMs then operate over this repository for inference and rule derivation, with full cross-reference context rather than a keyhole view. Because the repository is the single source of truth, every derived rule is consistent, traceable to its origin, and reproducible — the exact properties a chat session cannot offer.

Dimension Standalone Chatbot Repository + LLM Inference
System contextOne fragment at a timeWhole-system, cross-referenced
ConsistencyVaries per sessionEnforced single source of truth
TraceabilityNone / manualRule linked to source automatically
ReproducibilityPrompt-dependentDeterministic, re-runnable
Process natureManual, human-pacedStreamlined and governed

Transformation programs routinely span hundreds of applications, millions of lines, and thousands of interfaces. Sound investment decisions depend on knowing, across the whole estate, what can be retired, what can be re-platformed, what must be rewritten, and what should remain unchanged. A repository-based BRE platform delivers this enterprise-wide visibility — and the fact-based discovery it produces (functional complexity, dependencies, migration effort) is exactly what makes accurate roadmaps and confident fixed-price estimation possible.

3.2 The Sanity Gate: A Non-Negotiable Stop-Gap

Before any extracted artifact is allowed to shape the target architecture, it passes through a human-reviewed sanity check. This is where domain experts confirm that a derived rule is real, current, and correct; retire what is obsolete; resolve patches into a single coherent policy; and separate genuine business logic from technical plumbing. Modernization must never proceed without cautiously reviewing the existing rules — skipping this gate is precisely how organizations carry decades of error into their future at great expense.

  • Every dollar of conversion is spent on logic the business actually needs today.
  • Obsolete rules are retired before they cost anything to migrate or maintain.
  • Clean, validated rules map naturally onto well-formed services and components.

3.3 The By-Product Is a Durable Enterprise Knowledge Asset

A modernization program governed this way delivers more than a new platform. The cleaned, catalogued rules become a lasting enterprise knowledge asset — business-rule repositories, process knowledge bases, domain models, functional documentation, API specifications, and test assets. This directly counters one of the gravest risks in legacy estates: the retirement of aging experts faster than organizations can replace them. Decades of undocumented logic and embedded policy are captured and institutionalized rather than lost, reducing key-person risk and continuing to generate value long after the migration completes.

4. The Proven Pipeline

These principles assemble into a single, repeatable model. Each stage has a clear purpose and a clear hand-off, and the LLM-powered repository accelerates the stages while the human sanity gate governs them.

1

Source Code

Ingest the full legacy estate into a structured, queryable repository — the single source of truth.

2

Rules & Processes

Use LLMs over the repository to derive business rules and their associated processes, each traceable back to its source.

3

Sanitize / Cleanup

Human-in-the-loop review: confirm real rules, retire the obsolete, resolve patches, strip technical plumbing. The non-negotiable gate.

4

Categorize & Catalog

Organize the cleaned rules and processes into a structured catalog by domain, ownership, and capability.

5

Assemble Target Components

Map the catalog onto the target architecture as well-formed components and services.

6

Code Convert to Target

Generate target-platform code for each component from validated rules — not from raw legacy translation.

7

Dev Wrap-up

Integrate components, build interfaces and wrappers, and complete engineering hardening.

8

Test

Validate behavior against the catalogued rules — the rule baseline becomes the test oracle.

9

Deploy

Release to production with full traceability from deployed feature back to source rule.

  • Automation with discipline. A repository plus LLM inference replaces the manual chatbot loop with a consistent, error-resistant, reproducible, and future-ready process.
  • Never modernize blind. Existing rules are reviewed cautiously through the sanity gate before anything reaches the target.

5. The System Integrator's Case for BRE

For a System Integrator, the goal is not AI-enabled outputs but successful business outcomes. Viewed through that lens, a BRE platform is not an additional tool — it is the knowledge foundation that lets an SI deliver modernization with confidence, control, and repeatability. The following benefits explain why leading integrators increasingly mandate BRE on every large-scale program.

Driver What BRE Delivers SI Benefit
Understanding before transformationSystematic extraction of rules, processes, data and dependencies before work beginsA fact-based foundation that removes uncertainty
Industrialized executionThe operational framework that applies LLMs safely across thousands of appsMoves from experimentation to repeatable delivery
Business outcome assuranceA verifiable chain of evidence from legacy to targetHigher executive confidence and sponsorship
SME dependency reductionCapture and institutionalize undocumented, retiring expertiseLower key-person risk; predictable delivery
Portfolio visibilityEnterprise-wide view of retire / re-platform / rewrite / retainBetter roadmaps and investment prioritization
Risk over costCritical logic identified and validated before migrationFewer breaches, outages and miscalculations
Reusable knowledge assetRule repositories, domain models, API specs, test assetsFuture initiatives at lower cost, higher speed
Agentic AI readinessExplicit rules, decision models and knowledge graphsPositions clients for automation beyond migration
Fixed-price confidenceClear view of complexity, dependencies and effortBetter pricing accuracy and stronger margins

5.1 Risk Reduction Usually Outweighs Cost Reduction

Many organizations frame modernization around cost savings, but the largest exposure is transformation failure itself — regulatory breaches, business disruption, production outages, and incorrect business calculations. Because a BRE platform identifies and validates critical business logic before migration, it attacks the most expensive category of risk directly. For executives accountable for revenue continuity, customer experience, compliance, and operational resilience, that assurance is often worth more than the headline cost number.

5.2 Three Capabilities, One Outcome

No single capability is sufficient. The most successful programs combine all three, each doing what it does best.

LLM Platforms Provide BRE Platform Provides SI Partner Provides
IntelligenceDiscovery & rule extractionIndustry expertise
InterpretationTraceability & governanceTransformation leadership
Automation assistanceValidation & repeatabilityDelivery & change management
Inference assistanceWhole-system context for inferenceBusiness alignment

The most successful modernization programs are not AI-led. They are business-led, AI-enabled, and BRE-governed — combining generative AI for analysis and automation, a BRE platform for governance and rule intelligence, and SI domain expertise for delivery.

6. Conclusion

Coding assistants have genuinely changed what is possible in modernization, but they are accelerators, not strategies. Pointed directly at a million-line estate, a standalone chatbot delivers a manual, inconsistent, un-auditable conversion — and an as-is conversion faithfully preserves decades of clutter the business has already outgrown.

The durable answer is to treat modernization as knowledge recovery followed by deliberate reconstruction. Build a repository from the source, let LLMs derive business rules and processes against it, and require a human sanity gate before those artifacts shape the target. Then categorize, catalog, assemble components, convert, wrap up, test, and deploy. This proven model trades the seductive shortcut for a system that genuinely serves the modern business — delivered with consistency, traceability, and the highest achievable return on investment.

For System Integrators, this is the difference between applying AI to legacy systems and delivering a successful business transformation. LLMs accelerate analysis and automation; a BRE platform supplies the governance, traceability, and rule intelligence that enterprise scale demands; and SI domain expertise turns both into outcomes. Combined, they give clients the highest probability of modernizing on time, on budget, and with reduced operational risk.

Translate the past and inherit its problems, or understand the past and rebuild for the future. Only the second path, governed by a disciplined rule-driven pipeline, delivers lasting value.