Public playbooks, engineering & delivery (digest)
claude-cowork · confidence high · status active
tags: devsecops dora delivery culture playbooks
Now
Dwayne's authored playbooks on dwaynehelena.com (source ~/Projects/ai-hub/docs/), anchored in a Tier-1 bank DevSecOps transformation (40k-person org, quarterly → continuous delivery). Digest per doc:
- devsecops-engineering, Golden paths thesis: rebuild pipelines so security is the path of least resistance. Bank results: security review 6 weeks → <4h; security-defect CFR −60%; 95% of new infra compliant at provision (CIS-encoded Terraform modules); OPA drift scans every 15 min with auto-remediation of critical controls; Vault dynamic secrets, 24h rotation; voluntary golden-path adoption >90% in 6 months ("engineers don't resist security when security doesn't resist engineering"). 2026 agentic extension: secure the autonomous workflow, memory provenance/expiry/supersession, trajectory review for high-impact actions, right-sized reasoning budgets.
- dora-metrics, Speed and stability are complementary, not trade-offs. Bank evidence: weekly deployers CFR 3% vs monthly 14%; lead-time decomposition showed scans <8% of lead time, review queues (2 days) were the real bottleneck; P1 MTTR 4h → 18min via canary+auto-rollback. DORA 2025: adds Rework Rate, replaces tiers with 7 team archetypes. Agent-metrics layer: retrieval precision, trajectory review rate, memory supersession rate, AI-serving SLO attainment, human override rate. Never weaponize: team-level only, self-set targets, anonymized quartiles, blameless reviews.
- devsecops-research, tools-first transformations drown in unresolved findings; governance and maturity pathways first.
- software-delivery, "move fast and break nothing"; AI-native delivery controls section.
- fast-flow, the single most impactful transformation investment was a platform engineering team; Team Topologies + cognitive-load reduction.
- fast-feedback, observability-driven engineering; overnight-batch failure story as the cost-of-slow-feedback anchor.
- climate-for-learning, Westrum generative culture; culture is an engineering capability; psychological safety measurable.
- code-maintainability, tech debt managed deliberately; readability as banking risk control.
- database-change-management, evolutionary schema design; "database changes are the scariest deployments in banking."
- documentation-quality, docs-as-code + Diátaxis; the site itself is the proof artifact.
Use: cite these when advising on delivery/security work; they are Dwayne's public positions, align fleet behaviour with them (e.g. golden-path bias, blameless reviews, agent-metric telemetry).
Log
- 2026-07-09: created from local ai-hub docs digest, claude-cowork.
Sources:
~/Projects/ai-hub/docs/ (11 engineering docs · fetched/read 2026-07-09)