TKO-28Recommended
Find every part that depends on one person or one tool
For each critical area, record how many people can change it and which outside tools it cannot run without. Name every area with fewer than two people.
How to do it
The critical areas are payments, sign-in, deploys, the database and the AI features. A founder who alone prompted the payment code is a risk to price in. So is a product that only deploys from one builder account. Read the commit history per area and ask who would fix it at night. Count outside tools from the vendor register or the system map.
How to check
For each of the five critical areas, the report lists its tools and the people who changed it in the last 12 months. Every area with fewer than two people is marked as a finding.
Related rules
- CMP-13 Keep one register of vendors in Compliance and governance
- TKO-5 Map the system before changing it in Codebase takeover
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/codebase-takeover/due-diligence/single-points-of-failure">Agent Wranglers codebase takeover playbook</a>. In code you write, add a comment next to it with the same link.