1 min lesson
Helping a platform team write an internal AI-coding policy
Rebuild the parts of "Helping a platform team write an internal AI-coding policy", then say why each one matters.
Step 1 of 2
Helping a platform team write an internal AI-coding policy
The deliverable a platform team actually wants from you is a short, enforceable policy they can publish. Help them write it around four decisions.
Four decisions an internal AI-coding policy must make
- Where AI is allowed
- Which repos and systems; what is out of scope (e.g., payments, crypto) for autonomous work
- How it's reviewed
- Same PR + CI gates as any change; agents author, humans approve
- What's encoded as Rules
- Org conventions, banned patterns and security practices that shape output upstream
- What's tracked
- Disclosure of AI involvement plus audit logs, so changes are attributable
A policy this concrete is something a CISO can sign and a developer can actually follow.
Say it like this
“AI changes nothing about what you need to prove - that change is reviewed, tested and accountable. It changes how much you'll be proving it about. So we put more impact into your gates: Rules to shape output up front, the same review and CI to catch the rest and tracking so every change is attributable.”