Our release gates
1. Identity and permissions
Users are authenticated appropriately and can access only the records and actions their roles permit.
2. Data integrity
Schema constraints, controlled migrations and validation protect important records from corruption or contradiction.
3. Privacy and security
Data collection is minimised, sensitive operations are protected and claims are limited to controls that have been verified.
4. Testing and releases
Critical user journeys, failure states and permissions are tested before controlled release.
5. Monitoring and auditability
Operational failures can be detected, diagnosed and assigned without relying on customer complaints.
6. Backup and recovery
Backups are useful only when restoration has been tested and recovery responsibilities are understood.
7. Operational ownership
Documentation identifies the source, environments, dependencies, responsible people and incident process.
8. Human oversight of AI
AI-generated recommendations and actions have boundaries, traceability and approval controls appropriate to their consequences.