For leadership and board
For CTOs, CIOs, managing directors and boards. A short, regular view of risk: what changed, what was approved, what went around the process and what the suppliers did.
If this sounds familiar
After the last incident, the first question in the board meeting was “who approved this?” and it took a week to answer.
- Control
- Risky changes need the right approvers, never the person who asked. Freezes protect your critical dates.
- How it works
- Proof
- A Trust page and scorecards computed from the records, not typed in by the team being judged.
- How it works
- One rulebook
- One standard for staff, contractors and AI agents, so a new supplier starts on your rules, not theirs.
- How it works
Allow partial refunds from the merchant dashboard
Asked by A. Patel, with Claude Code · change CHG-2291 · 7d3a9c…41fe
- The change, in plain words
- Merchants can refund part of a payment instead of all of it. Adds a
refund_amountcolumn and one endpoint.14 files · +412 −38 · 1 migration - Risk, and why
- Touches payments code
- Includes a database migration
- Written with an AI agent
- Evidence
- 1,284 tests passed
- No secrets, 0 critical CVEs
- Built in CI, signed
- Verified in staging for 26 h
- Blast radius
- Business service Card payments. Impact tolerance: no more than 2 hours of disruption.Canary 5% → 25% → 100%, halts if errors pass 0.5%
- Backout plan
- One-step rollback to v4.17.3. The migration has a tested down-migration; the 06:00 verified backup is the fallback.
2 approvers, never the requester
- R. Lindqvist (you)
- Waiting
- J. Osei, Risk
- Waiting
- Rollout
- Not started
Your signature will cover change 7d3a9c…41fe and nothing else.
What to tell your boss
“We will answer “who approved this?” in a minute, with proof, and be the team that saw it coming.”
Forward the one-page board briefSee what shipped without approval in your last 90 days.
Install the GitHub App and the scan arrives in minutes: every repo scored, every unreviewed merge and unapproved deploy named. Nothing is blocked until you choose.
Ship like a startup. Prove it like a bank.