Skip to lesson
Exit
CI/CD, release engineering & the toolchain1 / 3

2 min lesson

What a regulated pipeline adds

Answer "What is the difference between a red gate and the 'evidence' a regulated pipeline expects from it?" Use the clue you found.

Step 1 of 3

What a REGULATED pipeline addsITGC territory

Separation of duties at the merge gate

Interactive diagram. Tab through its regions; each focused region shows its detail in the panel below.

diagram: sod

The author of a change cannot be its sole approver and in stricter regimes the approver and deployer are distinct identities from the author. This is the control auditors care about most. AI-authored code makes the *authorship* attribution question sharper, not looser.

Learn more

Optional practice

Practice: What a regulated pipeline adds

QHow does AI-authored code interact with separation of dutiesNo single person can author, approve and deploy the same change. The core control AI autonomy has to respect. Press Enter for the full definition. and how do you answer a controls owner's concern?