For engineering and platform
For heads of engineering and platform. Routine changes go out on policy with no one paged. Risky ones reach the right approver with everything they need, from the tools your team already uses.
If this sounds familiar
Your team has started using AI agents in production code, and someone has asked how you know what they changed.
- Control
- Standard changes approved by policy in seconds. Approvals bound to the exact change, so nobody re-approves a rebase by accident.
- How it works
- Proof
- Merged, deployed and working, each with its own proof. A deploy is verified by the version the service reports.
- How it works
- One rulebook
- One pack writes the rules for Claude Code, Copilot and Cursor, and the same guard runs in git hooks.
- How it works
Allow partial refunds from the merchant dashboard
Asked by A. Patel, with Claude Code · change CHG-2291 · 7d3a9c…41fe
- The change, in plain words
- Merchants can refund part of a payment instead of all of it. Adds a
refund_amountcolumn and one endpoint.14 files · +412 −38 · 1 migration - Risk, and why
- Touches payments code
- Includes a database migration
- Written with an AI agent
- Evidence
- 1,284 tests passed
- No secrets, 0 critical CVEs
- Built in CI, signed
- Verified in staging for 26 h
- Blast radius
- Business service Card payments. Impact tolerance: no more than 2 hours of disruption.Canary 5% → 25% → 100%, halts if errors pass 0.5%
- Backout plan
- One-step rollback to v4.17.3. The migration has a tested down-migration; the 06:00 verified backup is the fallback.
2 approvers, never the requester
- R. Lindqvist (you)
- Waiting
- J. Osei, Risk
- Waiting
- Rollout
- Not started
Your signature will cover change 7d3a9c…41fe and nothing else.
What to tell your boss
“We can keep our release speed and show every production change was approved and verified.”
Forward the one-page board briefRead next
See what shipped without approval in your last 90 days.
Install the GitHub App and the scan arrives in minutes: every repo scored, every unreviewed merge and unapproved deploy named. Nothing is blocked until you choose.
Ship like a startup. Prove it like a bank.