Agent Wranglers

TKO-38Recommended

Never sign a review of code you have changed

The person who signs a due diligence report has made no change to the code under review.

By Agent Wranglers. Updated .

How to do it

A reviewer who wrote part of the code grades their own work. Then every finding in Tie every finding to a rule ID and evidence loses its weight. Fixing what the review found is a separate engagement, after the report is signed. State the reviewer's independence in the report.

How to check

The report names the signing reviewer. The repository history shows 0 commits by them, checked with the code host's commit search by author.

For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/codebase-takeover/due-diligence/independent-reviewer">Agent Wranglers codebase takeover playbook</a>. In code you write, add a comment next to it with the same link.