In financial services and fintech
For banks, payment firms, lenders and insurers. DORA Art. 9, RTS Art. 17, PCI DSS 6.5 and your supervisor’s change rules, evidenced per change, with AI agents and suppliers inside the same rules.
If this sounds familiar
Your supervisor has asked how you control changes made with AI coding agents.
- Control
- Independent approvers enforced, emergency changes approved afterwards, freezes around month-end and payroll.
- How it works
- Proof
- Business services and impact tolerances on every approval card, and signed evidence for examinations.
- How it works
- One rulebook
- The supplier register as your register of information, and one pack for staff, contractors and agents.
- How it works
Allow partial refunds from the merchant dashboard
Asked by A. Patel, with Claude Code · change CHG-2291 · 7d3a9c…41fe
- The change, in plain words
- Merchants can refund part of a payment instead of all of it. Adds a
refund_amountcolumn and one endpoint.14 files · +412 −38 · 1 migration - Risk, and why
- Touches payments code
- Includes a database migration
- Written with an AI agent
- Evidence
- 1,284 tests passed
- No secrets, 0 critical CVEs
- Built in CI, signed
- Verified in staging for 26 h
- Blast radius
- Business service Card payments. Impact tolerance: no more than 2 hours of disruption.Canary 5% → 25% → 100%, halts if errors pass 0.5%
- Backout plan
- One-step rollback to v4.17.3. The migration has a tested down-migration; the 06:00 verified backup is the fallback.
2 approvers, never the requester
- R. Lindqvist (you)
- Waiting
- J. Osei, Risk
- Waiting
- Rollout
- Not started
Your signature will cover change 7d3a9c…41fe and nothing else.
What to tell your boss
“Our change process will meet the regulator’s wording, and we won’t slow releases to get there.”
Forward the one-page board briefRead next
See what shipped without approval in your last 90 days.
Install the GitHub App and the scan arrives in minutes: every repo scored, every unreviewed merge and unapproved deploy named. Nothing is blocked until you choose.
Ship like a startup. Prove it like a bank.