I’m glad someone called that out. No one person being able to get a change from their laptop to production without review is a baseline requirement of a lot of certifications, because while I trust the other people on my team the security team at a client’s client have no reason to.

Self review is absolutely a thing you can get away with in the early days of a startup, and at some point will probably be necessary because you’ve only got one developer, but if you have enterprise clients just turning off review requirements is a fast track to losing those clients.

Yeah. The problem with AI brained people is they have zero concept of information security. Most of their ideas would be shot down immediately, but they're shadow-ITing them into existence because "WeRe UsINg FrOnTiER Ai"