Agent WranglersTDD-1Required
Never sign a review of code you have changed
The person who signs a due diligence report has made no change to the code under review.
How to do it
A reviewer who wrote part of the code grades their own work. Then every finding in Tie every finding to a rule ID and evidence loses its weight. Fixing what the review found is a separate engagement, after the report is signed. State the reviewer's independence in the report.
How to check
The report names the signing reviewer. The repository history shows 0 commits by them, checked with the code host's commit search by author.
Sources
Related rules
- TDD-3 Tie every finding to a rule ID and evidence in Technical due diligence
- TDD-23 Run the buyer's checks on yourself before the review in Technical due diligence
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/due-diligence/scope-and-conduct/independent-reviewer">Agent Wranglers technical due diligence playbook</a>. In code you write, add a comment next to it with the same link.