PROJECT DELIVERY

How to take over a stalled technical project without making it worse.

The instinct on inheriting a stalled project is to demonstrate progress quickly. That instinct is usually what turns a stalled project into a failed one.

TAKEAWAY

Establish the true state before you add a single unit of work.

A stalled project is not a slow project. It is a project whose real state nobody can describe with confidence — which is why estimates stop being meaningful and why adding people or urgency tends to make the situation worse rather than better.

The recovery sequence below is deliberately unglamorous: hold the work, reconstruct what is actually true, separate what was worked on from what was accepted, establish who decides and who does, resequence by dependency, and resume at a size small enough to verify. Every step exists to replace a belief with something inspectable.

01 / WHY TAKEOVERS GO BACKWARDS

The new team is under pressure to prove itself, and proof looks like output.

Whoever inherits a stalled project arrives with something to demonstrate. The previous arrangement lost confidence; the new one wants to restore it. The fastest visible way to do that is to ship something — a feature, a fix, a deployment — within the first fortnight.

That is the move that causes damage. Shipping into a system whose state is not understood produces changes nobody can safely evaluate, on top of work nobody has verified, against requirements nobody has re-confirmed. If it goes wrong, the failure now belongs to the new team, and the one remaining source of information about the old state — the running system as it was — has been altered.

There is a second, quieter failure mode. The new team writes a long assessment, presents it, and asks for a decision. Weeks pass. The project is now stalled in a new way, and the assessment has aged. Recovery has to be fast without being premature, which is a narrower path than either instinct allows for.

A takeover is a transfer of accountability, not just of work. The moment you change the system, its prior condition becomes an assertion instead of a fact.

02 / THE RECOVERY SEQUENCE

Six steps, in this order, for a reason.

Each step produces something the next step depends on. Running them out of order is possible and usually wasteful: resequencing a plan before you know what is complete produces a confident plan built on a guess.

  • HOLD

    Stop adding work. Secure access, freeze scope changes and establish what is currently running. This is a short, explicit pause with a stated end, not an indefinite halt.

  • RECONSTRUCT

    Rebuild the true state from what can be inspected — the code, the environments, the data, the tickets, the decision trail — rather than from status reports.

  • SEPARATE

    Divide everything into what was worked on and what was actually accepted against a criterion. These are different lists and they are rarely the same length.

  • OWN

    Establish who decides and who does, for the project as it is now. Unowned decisions are the most common single cause of a project that has stopped moving.

  • RESEQUENCE

    Reorder the remaining work by dependency and risk rather than by how urgent it feels. Urgency is a poor sorting function when several things are blocked.

  • RESUME

    Restart with a slice small enough to complete and verify inside one short cycle, so the first thing the project produces after recovery is evidence.

03 / HOLD

Secure the access first, because everything else depends on it.

Before any technical assessment is possible, the new owner needs genuine control of the assets. In practice this is where a large share of takeovers stall, because access is distributed across whoever happened to set each thing up. Administrative ownership of source control — not collaborator access. The hosting, DNS, certificate and domain accounts. The build and deployment pipeline. Cloud and database accounts. Third-party services the system depends on, including the ones nobody remembers buying.

Access is also a security event. Credentials held by a departing party should be rotated on a defined schedule rather than left in place because rotation feels like an accusation. The same applies to keys embedded in the codebase or in a build configuration, which is a common discovery during takeover and a legitimate reason to pause a deployment.

The freeze itself should be explicit and short. Announce that no new scope enters and no non-critical change ships until the reconstruction is complete, state roughly how long that will take, and hold to it. An undeclared freeze reads as drift; a declared one reads as control.

What a hold actually requires:

  • ADMINISTRATIVE ACCESS, NOT COLLABORATOR ACCESS

    Ownership of repositories, pipelines, hosting, domains and third-party accounts — the level that survives the previous party withdrawing cooperation.

  • A CREDENTIAL ROTATION PLAN

    Which secrets change, in what order, and what breaks when they do. Rotation is treated as routine hygiene at a handover, not as a judgment about anyone.

  • A KNOWN RUNNING STATE

    What is deployed right now, where, and from which revision. Surprisingly often the running system does not correspond to any branch anyone can name.

  • A DECLARED, TIME-BOXED FREEZE

    No new scope, no non-critical changes, for a stated period. The end condition is the reconstruction being complete, not a date chosen for comfort.

04 / RECONSTRUCT

Inspect the artefacts, not the narrative around them.

Status reports on a stalled project are not lies so much as accumulated optimism: each one was written when the next step still looked close. Reconstruction means going to the artefacts and forming an independent view.

Read the repository history rather than the ticket board. Commit history shows what genuinely received attention and when it stopped. A module last touched four months before the project stalled is either finished or abandoned, and which one it is matters. Run the build from a clean checkout on a clean machine; a build that only works on one person's laptop is a dependency on that person, not a working build. Deploy to a non-production environment and see what happens. Look at the data as it actually exists, not as the schema describes it.

Then read the decision trail. Somewhere in the messages, documents and pull request comments are the choices that shaped the system — including the ones made under time pressure and never revisited. The open decisions are the most valuable thing you will find, because an unmade decision blocks work silently while everyone assumes someone else has made it.

Where secure development practice is concerned, a takeover is a reasonable moment to establish what the project's practices actually are rather than inherit them by assumption. NIST's Secure Software Development Framework describes a core set of high-level practices intended to be integrated into a development lifecycle; treating the reconstruction as the point where those are named and adopted is more productive than discovering their absence later.

05 / SEPARATE

Activity is not acceptance.

The single most useful distinction in a recovery is between work that happened and work that was accepted against a criterion. A stalled project almost always has a great deal of the first and very little of the second, and the gap between them is the real remaining scope.

A task marked complete in a tracker means somebody stopped working on it. It does not mean anyone agreed it met a requirement, that it was tested, that it works with the rest of the system, or that the person who needed it has seen it. Each of those is a separate claim, and each needs separate evidence.

Two claims that are routinely treated as one
QuestionWorked onAccepted
What it meansSomeone spent effort on it and stoppedSomeone with authority agreed it meets a stated criterion
Who decidedThe person doing the workThe person who needs the outcome
EvidenceA commit, a ticket transition, a demoA written criterion and a recorded decision against it
Can it be trusted in a planNo — its true completeness is unknownYes — it can be treated as done and built upon
What it costs to be wrongRework discovered later, usually at integrationA recorded decision that can be revisited deliberately

06 / OWN

Establish ownership before adding work, not after.

Projects rarely stop because nobody is working. They stop because a decision is required and no one holds it, so work continues around the gap until everything left is blocked by the same unmade choice. Recovery has to name the decision-makers before it names the tasks.

Two roles need to be explicit. Who decides — the person who can approve a trade-off, accept a milestone and change scope, with the authority to do it without convening a committee each time. And who does — the named individual responsible for a piece of work moving, as distinct from a team that collectively owns it and therefore does not.

This is also the moment to ask whether the previous arrangement failed for reasons that will persist. If the project stalled because approvals took weeks, replacing the delivery team does not address it. That is an uncomfortable conversation and it belongs at the start, when it is a condition of recovery rather than an excuse at the end.

07 / RESEQUENCE

Order by dependency, not by how urgent something feels.

The plan a stalled project inherits is usually sequenced by priority, and priority is a statement about value rather than about order. When several workstreams are blocked, the highest-value item is frequently not the one that can move.

Rebuild the order from the dependency graph. What must exist before anything else can be verified? Which decisions unblock the largest number of downstream items? Where does one workstream feed another, and is that relationship written down anywhere or held in one person's memory? Hidden dependencies are the second-largest source of takeover surprise after unverified completeness — and they surface most reliably by attempting to deploy the system end to end rather than by reading the plan.

Risk belongs in the ordering too. Work that is likely to change the shape of what follows should happen early, while the cost of being wrong is still small. Work that is well understood can wait; it will still be well understood later.

08 / RESUME

Restart at a size you can finish and verify.

The first thing a recovered project produces should be evidence, not volume. Choose a slice that can be completed, accepted against a written criterion and demonstrated inside one short cycle — small enough that if the estimate is wrong, the error is visible in days rather than months.

That first completed slice does something a plan cannot: it calibrates. It shows how long work actually takes in this system, with this team, under these approvals. Every estimate afterwards is grounded in an observation rather than an assumption, and the stakeholders who lost confidence get something inspectable rather than a promise that things are different now.

Resist the temptation to make the first slice impressive. Its job is to be finished.

09 / THREE MOVES MADE TOO EARLY

Changing the tools, the team or the plan usually addresses a symptom.

Three interventions get proposed in the first week of almost every recovery. Each is occasionally correct and usually premature.

  • CHANGING THE TOOLS

    Moving the work to a different tracker or platform is visible, feels decisive and changes nothing about why the project stopped. Tooling is rarely the first rescue decision; a migration during recovery also destroys the history you are still reconstructing. If the tooling genuinely blocks the work, that will still be true in three weeks — and by then the case for it will be specific.

  • REPLACING THE TEAM

    The people who worked on a stalled project hold most of the undocumented knowledge about it. Removing them before reconstruction converts recoverable context into permanent loss. Where individuals are genuinely the constraint, that is a conclusion the reconstruction should support, not a premise it starts from.

  • REWRITING THE PLAN

    A new plan produced before the state is known is a confident restatement of the same unknowns. Plans are cheap to write and expensive to believe. Sequence the work after separating accepted from worked-on, not before.

A fourth move — rewriting the codebase — deserves the same scepticism and a higher burden of proof, because it discards the one artefact that still tells you what the system does.

10 / PAUSE, RE-SCOPE OR STOP

Not every stalled project should resume.

Recovery work carries an assumption that the project should continue. That assumption deserves testing while the reconstruction is still fresh, because it is the last moment when stopping is cheap.

Pause when the blocker is external and dated — a decision awaiting a board, a dependency awaiting a vendor, a requirement awaiting a regulatory outcome. Continuing to build around a known unknown produces work that may need to be undone, and a declared pause preserves the option.

Re-scope when the original outcome is still valuable but the path to it no longer is. This is common where a project was scoped before its problem was fully understood: the requirement survives, the specification does not. Re-scoping is not failure; it is the plan catching up with what was learned.

Stop when the outcome no longer justifies the remaining cost, when the business need that produced the project has been met another way, or when the reconstruction shows the remaining work is substantially larger than what has been accepted so far and nobody can explain why this attempt would go differently. Recommending a stop is part of accountable delivery. A partner who cannot say it is not giving advice.

11 / THE TAKEOVER RECORD

What a clean handover leaves behind.

The reconstruction produces a document, and that document is the deliverable of the recovery phase. It should be short enough that the people who need to act on it will read it.

  • ACCESS AND OWNERSHIP

    What the business now controls, what remains outstanding, and which credentials were rotated.

  • THE RUNNING STATE

    What is deployed, from which revision, in which environments, and how it is built and released.

  • ACCEPTED VERSUS WORKED ON

    The two lists, separately, with the criterion each accepted item was accepted against.

  • OPEN DECISIONS

    Every decision the project needs, who holds it and what is blocked behind it.

  • DEPENDENCIES

    The real graph, including the relationships that were previously held in someone's memory.

  • RISKS AND UNKNOWNS

    What could not be verified during reconstruction, and what it would take to verify it.

  • THE RESUMPTION SLICE

    The first piece of work, its acceptance criterion and its named owner.

SUMMARY

What to take from this.

  1. A stalled project is one whose true state nobody can describe with confidence — which is why adding people or urgency to it usually makes things worse.
  2. Secure administrative access and rotate credentials before any technical assessment; a large share of takeovers stall on access alone.
  3. Reconstruct the state from artefacts — repository history, a clean build, a real deployment, the data — rather than from status reports.
  4. Separate what was worked on from what was accepted against a written criterion; the gap between those two lists is the real remaining scope.
  5. Establish who decides and who does before adding work, and test whether the reason the project stalled will persist under new delivery.
  6. Changing tools, replacing the team or rewriting the plan are usually premature; each addresses a symptom and destroys context you still need.
  7. Resume with a slice small enough to finish and verify in one short cycle, so the first output after recovery is evidence rather than volume.
  8. Test whether the project should continue at all while the reconstruction is fresh — pausing, re-scoping and stopping are legitimate outcomes.

REFERENCES

Sources and further reading.

These sources support the external standards, legal context and research discussed above. The operating recommendations remain Aevrion's analysis.

  1. Secure Software Development Framework (SSDF) Version 1.1 — NIST SP 800-218National Institute of Standards and Technology

    A core set of high-level secure software development practices intended to be integrated into a development lifecycle — a reasonable reference point when a takeover has to establish what a project's practices actually are.

NEXT

Related capabilities.

If something here describes a constraint you are living with, the Contact form asks for the problem rather than the solution.

Start a projectAll insights