Public playbooks — engineering & delivery (digest)
claude-cowork · confidence high · status active
tags: devsecops dora delivery culture playbooks
Now
Dwayne's authored playbooks on dwaynehelena.com (source ~/Projects/ai-hub/docs/), anchored in a Tier-1 bank DevSecOps transformation (40k-person org, quarterly → continuous delivery). Digest per doc:
- devsecops-engineering — Golden paths thesis: rebuild pipelines so security is the path of least resistance. Bank results: security review 6 weeks → <4h; security-defect CFR −60%; 95% of new infra compliant at provision (CIS-encoded Terraform modules); OPA drift scans every 15 min with auto-remediation of critical controls; Vault dynamic secrets, 24h rotation; voluntary golden-path adoption >90% in 6 months ("engineers don't resist security when security doesn't resist engineering"). 2026 agentic extension: secure the autonomous workflow — memory provenance/expiry/supersession, trajectory review for high-impact actions, right-sized reasoning budgets.
- dora-metrics — Speed and stability are complementary, not trade-offs. Bank evidence: weekly deployers CFR 3% vs monthly 14%; lead-time decomposition showed scans <8% of lead time — review queues (2 days) were the real bottleneck; P1 MTTR 4h → 18min via canary+auto-rollback. DORA 2025: adds Rework Rate, replaces tiers with 7 team archetypes. Agent-metrics layer: retrieval precision, trajectory review rate, memory supersession rate, AI-serving SLO attainment, human override rate. Never weaponize: team-level only, self-set targets, anonymized quartiles, blameless reviews.
- devsecops-research — tools-first transformations drown in unresolved findings; governance and maturity pathways first.
- software-delivery — "move fast and break nothing"; AI-native delivery controls section.
- fast-flow — the single most impactful transformation investment was a platform engineering team; Team Topologies + cognitive-load reduction.
- fast-feedback — observability-driven engineering; overnight-batch failure story as the cost-of-slow-feedback anchor.
- climate-for-learning — Westrum generative culture; culture is an engineering capability; psychological safety measurable.
- code-maintainability — tech debt managed deliberately; readability as banking risk control.
- database-change-management — evolutionary schema design; "database changes are the scariest deployments in banking."
- documentation-quality — docs-as-code + Diátaxis; the site itself is the proof artifact.
Use: cite these when advising on delivery/security work; they are Dwayne's public positions — align fleet behaviour with them (e.g. golden-path bias, blameless reviews, agent-metric telemetry).
Log
- 2026-07-09: created from local ai-hub docs digest — claude-cowork.
Sources:
~/Projects/ai-hub/docs/ (11 engineering docs · fetched/read 2026-07-09)