Christoph HellmuthDesign Engineering Studio

Free playbook

The Pilot-First Playbook

Prove your design system on funded product work before you pitch for a team.

Christoph HellmuthDesign engineer · 16+ years · enterprise design systems christophhellmuth.com

Contents

What you'll work through

Not a build order guide. A proof playbook: how to earn budget and trust by shipping on work that already has a deadline and a sponsor.

  1. 01 Start here 2
  2. 02 The Make System Use System trap 3
  3. 03 Hitch to moving work 4
  4. 04 Pilot Scorecard worksheet 5
  5. 05 Five pilot types 6
  6. 06 The Measuring Spoon Cycle 7
  7. 07 Connected npm vs copy-paste 8
  8. 08 Three concurrent pilots 9
  9. 09 Hot Potato beats handoff 10
  10. 10 Flow week / Systems week 11
  11. 11 The store, not the catalog 12
  12. 12 Pilot planning worksheet 13
  13. 13 Prove it, then pitch 14
  14. 14 What to do next 15
The Pilot-First PlaybookPage

01 · Start here

Proof before the pitch deck

You do not need permission to start. You need a funded flow, three weeks, and something shipped that a product lead will defend in a steering meeting.

This playbook is for design and engineering leaders at product companies (roughly 20, 200 people) who:

If you need readiness gates, build order, adoption rituals, and governance models, read my Survive Handoff playbook first. That guide answers what to build and in what order.

This guide answers a different question: how do you prove the system on real product work before anyone funds a dedicated team?

The TV pilot metaphor

Networks do not greenlight a series from a slide deck. They greenlight it from one episode. Your design system pilot is that episode: real characters (components), real dialogue (patterns), real stakes (a shipping date).

I led Aurora at Nord/NordVPN (dozens of teams, millions of users). Every time we scaled, proof on a live product beat a prettier roadmap.

01 · Start herePage

02 · The Make System Use System trap

"Build it and they will come" is a fantasy

The default corporate playbook fails in the same order every time. You have probably seen it.

  1. Pitch leadership with ROI slides and competitor screenshots
  2. Win budget for an abstract "foundation" nobody ships against
  3. Launch a comprehensive library in a big reveal
  4. Mandate adoption while squads are underwater on feature work
  5. Ask those same squads to contribute back while understaffed
  6. Watch usage flatline within two quarters

Call it the Make System Use System fantasy: if we just make a really good system, people will use it. Duh!

It ignores three realities:

Pilot-first antidote

Ship on funded product work first. Extract the system from what you built. Ask for scale-up with evidence, not vaporware.

02 · The Make System Use System trapPage

03 · Hitch to moving work

Board the train that's already leaving

A pilot without product pressure is a side project. Side projects do not survive the next reorg.

Look for inflection-point work that already has budget, a sponsor, and a deadline:

Your ask to the product lead is not "help me build a design system." It is: "Let us standardize this flow so your team ships faster and your launch date holds."

Reframe the conversation around schedule risk, not consistency theater. Velocity-measured teams fund what protects their roadmap.

How to find a host

Scan the quarterly roadmap. Mark anything with a named exec sponsor and a hard date. Score those candidates with the Pilot Scorecard on the next page. Highest score wins.

DACH replatform waves are ideal Raiders hosts: funded engineering motion, visible UI drift, and leadership already paying for the refactor.

03 · Hitch to moving workPage

04 · Pilot Scorecard worksheet

Turn politics into a ranked backlog

Eight factors, scored 0, 10 each. Highest total goes first. Run this live with PM and engineering in the room.

FactorWhat you're scoring0, 10
Components neededHow many system components does this pilot force you to build or harden?
Patterns neededForms, tables, empty states, navigation: does this flow exercise real patterns?
Business valueRevenue, retention, compliance, or cost savings tied to this work?
Technical feasibilityCan your team ship here without waiting on a platform rewrite?
Team receptivenessWill the host squad pair with you, or fight every PR?
Scope clarityAre boundaries written down, or does "refresh the app" mean everything?
IndependenceCan you progress without blocked dependencies on other teams?
Publicity potentialWill leadership notice when this ships? Visible wins unlock the next pilot.

Disagreement on scores is data. A 3 on receptiveness tells you to pick a different host or change the pilot type.

Candidate pilot · Total score
Ranked top three (highest score first)

I ship a blank scorecard in every audit readout. It is the bridge from diagnostic to funded pilot.

04 · Pilot Scorecard worksheetPage

05 · Five pilot types

Match the pilot to the political terrain

Not every host squad wants a design system embedded in their sprint. Pick the type that fits the work and the room.

Raiders
Refactor existing UI on a funded migrationSwap legacy markup for system components without changing UX. Low sacred-cow risk. Ideal when engineering is already touching the code.
Facelift
Visual refresh on a live surfaceNew tokens, typography, and component skins. Higher visibility. Watch scope: refresh, not redesign.
Speed Run
Greenfield flow on a hard deadlineNet-new screen or market launch. Fastest proof, but patterns may be too bespoke to generalize. Extract carefully.
Surrogate
System team ships for a partner squadUse when the product team will not partner. You build the flow; they review and merge. Higher cost, still valid proof.
Perimeter
Low-risk edge surfacesSettings, profile, help center, internal tools. Nobody's hero flow, but real production code. Great first win.

Starting advice

New to piloting? Open with Raiders or Perimeter. Do not improve UX during a Raiders refactor. Consistency first. Polish later.

05 · Five pilot typesPage

06 · The Measuring Spoon Cycle

Make product, then extract, then reuse forever

The system is not the textbook. It is the margin notes from real builds.

Think of a well-worn measuring spoon in a kitchen: forged from daily use, shaped by what you actually cook. Your design system should grow the same way.

  1. Make product. Ship the pilot flow on the host team's deadline. Use whatever components exist. Note every snowflake.
  2. Extract. Pull reusable pieces into the system package. Document what you learned in production, not in a vacuum.
  3. Reuse. Import those pieces into the next pilot. Measure whether the second host ships faster.
  4. Repeat. Each cycle hardens the canon. The library stops being theoretical.

Apply the three-times rule before you systematize a snowflake: if three squads need the same pattern, promote it. If one team needed it once, leave it local.

Collector mindset

Curate your org's best internal components. Do not invent a tenth button variant when nine already exist in production. Abstract from what teams already love (the IKEA effect).

06 · The Measuring Spoon CyclePage

07 · Connected npm vs copy-paste

Bootstrap is a download. Your system should be a package.

How product teams consume your system predicts whether pilots stick or drift within a quarter.

Copy-paste (Bootstrap model)Zip file or "duplicate this frame." Static snapshot. No update path. No deprecation signal. Every squad runs a fork.
Connected npm (product model)Versioned package in the repo. npm install @yourco/system. Teams pull updates. You can deprecate, changelog, and test before they feel pain.

Audit question I ask on every diagnostic: "How do squads consume your system today?" Copy-paste is a red flag. Connected consumption is a green flag.

Pilots fail quietly when extraction stops at Figma. The proof point leadership remembers is merged code in a product repo, importing a package version they can point to in a release note.

At Nord scale, connected distribution was the difference between a library people admired and a library people shipped.

07 · Connected npm vs copy-pastePage

08 · Three concurrent pilots

One pilot's components rarely fit the second channel

Multichannel orgs that run pilots sequentially often wait 18 months to learn the web components do not fit mobile or marketing.

If you ship across web app, marketing site, and mobile (or admin + customer-facing), plan three concurrent pilots with a small dedicated system team (even 2, 3 people):

Run the same Pilot Scorecard for each channel. Expect different winners. That is the point.

What you learn in parallel

Token architecture gaps show up when marketing needs display type your app never used. Navigation patterns diverge. Running three pilots surfaces shared primitives faster than any abstract audit workshop.

Sequential single pilots are fine for single-surface startups. For 20, 200 person product companies with multiple UIs, parallel pilots are cheaper than a false start.

Minimum viable design system after pilot one: three components teams can import Monday morning. Not a catalog. A wedge.

08 · Three concurrent pilotsPage

09 · Hot Potato beats handoff

Pass work in hours, not weeks

Pilots die in the gap between "design approved" and "engineering started." Hot Potato closes that gap.

The workflow is simple: designer and engineer work in the same session (virtual counts). The engineer drives implementation early. Work passes back and forth like a hot potato, same day.

  1. Designer explores inside code-friendly constraints (real tokens, real breakpoints)
  2. Engineer stubs the component in the product repo while pixels are still cheap to move
  3. Designer refines in Figma or directly in Storybook against the stub
  4. Engineer surfaces system gaps (missing variant, unclear token) before the PR is "done"
  5. Ship to the host squad's branch before the standup ends

This is the studio wedge in one ritual: design intent survives handoff because handoff barely exists.

Try it this week

Half-day workshop: one real component, one engineer, one designer, merged by end of day. Document the session as the template for every future pilot.

Still running waterfall comps? Pair this with my Design × Development Collaboration guide.

09 · Hot Potato beats handoffPage

10 · Flow week / Systems week

You cannot ship product and harden the system at full throttle simultaneously

Alternate weeks. Product delivery, then extraction. WordPress teams figured this out years ago; it still works.

Flow week

Embedded team ships product UI on the pilot host. Feature pressure is on. System work is limited to what the flow needs today.

Systems week

Extract, document, version, and test. No feature pressure. Promote snowflakes that passed the three-times rule. Write the changelog entry.

Without protected Systems weeks, extraction gets sacrificed every sprint. The library stays a side project.

10 · Flow week / Systems weekPage

11 · The store, not the catalog

Sell the Millennium Falcon kit, not loose bricks

Nobody walks into a Lego store asking for a 2×4 brick in #C91A09. They walk in for a kit they can build this weekend.

Most reference sites are parts warehouses: 47 button variants, alphabetized. Pilots need a store: assembled products teams can ship from.

Structure your docs around what squads actually build:

Components live inside those products, not at the top level. A PM browsing your site should recognize their roadmap, not a design textbook.

Evangelism never stops

After each pilot ships, add one new "product" to the store. Slack the link to the host squad's channel. Proof plus discoverability beats another all-hands slide.

11 · The store, not the catalogPage

12 · Pilot planning worksheet

Plan the first 3, 4 weeks

Fill this before you embed. One row per week. Share it with the host PM so scope stays honest.

WeekPilot typeHost squad / flowShip in productExtract to systemOwner
Week 1Hot Potato on first componentToken pass + v0.1.0 publish
Week 2Core flow screens in host repo+2 components, Storybook entry
Week 3Host squad merges pilot PRPattern doc + store recipe
Week 4Demo to leadership sponsorScorecard re-run for next host
Success metric (one number: time to ship, import %, support tickets, etc.)
Baseline before Week 1
Target by end of Week 4

Need a day-by-day build plan after the pilot proves out? See my 100-Day Playbook.

12 · Pilot planning worksheetPage

13 · Prove it, then pitch

Bring shipped code to the steering committee

The second funding conversation should open with a merged PR, not a Figma link.

What leadership needs to see after pilot one:

What to ask for next:

  1. Two more concurrent pilots (if multichannel)
  2. A named system owner (even 0.5 FTE to start)
  3. Protected Systems weeks on the roadmap
  4. Budget for connected tooling (CI, visual regression, docs hosting)
Do not ask forA 12-week "complete system" build. Abstract scope before traction repeats the Make System Use System trap.
Do not promiseSimultaneous adoption and contribution from every squad. Assume zero contribution capacity until pilot three.

Run the 40-Point Audit before pilot two if you need an objective health baseline. Reds become the extraction backlog.

13 · Prove it, then pitchPage

14 · What to do next

Want help running your first pilot?

I help DACH and EU product teams prove design systems on funded work, then scale what ships.

Design System Audit

€2,500, 4,500

Fixed-scope diagnostic across design, code, and process. Prioritized roadmap, Pilot Scorecard facilitation, and readout call. Fee credited toward a build.

Foundations Sprint

€12,000, 25,000

Tokens, core components, connected npm package, docs starter, and a Hot Potato kickoff on your highest-scored pilot host.

Fractional Design Systems Partner

from €5,000/mo

Ongoing governance, Flow/Systems week rhythm, and design engineering so pilots compound instead of stalling.

16+ years · Nord/NordVPN design systems (dozens of teams, millions of users on Aurora) · React/TypeScript · 1st place, Into Design Systems AI Hackathon 2026

Get a free consultation

I'll give you two or three concrete observations on your pilot shortlist. No pitch deck.

Get a free consultation · christophhellmuth.com · post@christophhellmuth.com

© Christoph Hellmuth · Free to share with attribution · Not for resale

Full compendium → · 40-Point Audit → · Survive Handoff playbook → · 100-Day Playbook →

Christoph Hellmuth · Design Engineering StudioPage