For suppliers and agencies
For agencies and contractors. Work in your client’s governed workspace with your usual tools. Every change you propose, and who approved it, is recorded as you go, and the handover pack is proof you can point the next client to.
If this sounds familiar
A new client’s procurement team has sent a 200-question supplier security questionnaire.
- Control
- You propose, your client approves. Routine work goes straight through; a change to CI or protected code waits for a named person on their side.
- How it works
- Proof
- A signed handover pack: every change you proposed through Aspian and who approved it, the repositories your client’s own installation holds, and each of your credentials checked as refused.
- How it works
- One rulebook
- The client’s rulebook writes your agents’ rules files (AGENTS.md, Claude Code, Cursor, Copilot), so you don’t maintain a second set.
- How it works
Allow partial refunds from the merchant dashboard
Asked by A. Patel, with Claude Code · change CHG-2291 · 7d3a9c…41fe
- The change, in plain words
- Merchants can refund part of a payment instead of all of it. Adds a
refund_amountcolumn and one endpoint.14 files · +412 −38 · 1 migration - Risk, and why
- Touches payments code
- Includes a database migration
- Written with an AI agent
- Evidence
- 1,284 tests passed
- No secrets, 0 critical CVEs
- Built in CI, signed
- Verified in staging for 26 h
- Blast radius
- Business service Card payments. Impact tolerance: no more than 2 hours of disruption.Canary 5% → 25% → 100%, halts if errors pass 0.5%
- Backout plan
- One-step rollback to v4.17.3. The migration has a tested down-migration; the 06:00 verified backup is the fallback.
2 approvers, never the requester
- R. Lindqvist (you)
- Waiting
- J. Osei, Risk
- Waiting
- Rollout
- Not started
Your signature will cover change 7d3a9c…41fe and nothing else.
What to tell your boss
“A governed engagement is our best reference: the client can see the quality of the work for themselves.”
Forward the one-page board briefRead next
See what shipped without approval in your last 90 days.
Install the GitHub App and the scan arrives in minutes: every repo scored, every unreviewed merge and unapproved deploy named. Nothing is blocked until you choose.
Ship like a startup. Prove it like a bank.