Product

Product · SDLC Playbook
The Product

How it actually works.

Nine user journeys, sixteen AI agents, eleven integrations, and the action enforcement model that turns process discipline into software.

Journey 01 · Engineering Director

Monday morning, 9:14 AM.

Sarah opens SDLC Playbook to see what happened across her four squads over the weekend. The Accountability Score answers her board’s question before her coffee is done.

She drills into the squad that dropped 12 points last week. The Root Cause Analysis explains why in two sentences. One Slack message later, the conversation is on the calendar.

Engineering Health · All Squads
87/ 100
â–² 4 PTS VS LAST MONTH
Open gate failures12
Releases this month23
Active stories156
Journey 02 · Senior Engineer

The merge that won’t go through.

Pablo expects his PR to land in 30 minutes. Code Sentinel blocks it. But instead of a red CI badge and a 400-line log, he sees four named gates with the exact reason each one passed or failed.

The Coach explains the fixes in his language. Then it offers to draft the missing test cases. He clicks once. Six tests appear in a sub-PR. He merges and moves on.

PR #2847 · refund-retry-v2 → main
Add exponential backoff to refund retry
BLOCKED · 2 OF 4 GATES
✓ Story Linkage Gate
Verified · 14 min ago
✗ Test Coverage Gate
Required: 80% · Actual: 42%
✗ Security Scan Gate
Snyk scan was not triggered
Journey 03 · QA Manager

The Friday deploy decision.

A federal release with 9 of 11 gates passed. The Deploy button is greyed out because the rollback plan is missing and the CS team training acknowledgments aren’t in. No amount of pressure changes that.

Once both items resolve, Lena clicks Deploy. Seven minutes later, the release is live and an evidence package is auto-locked to the Vault. Audit-ready, signed, sealed.

Release v3.15 · Production
Q2 2026 Federal Release
9 OF 11 GATES PASSED
✓ UAT Signoff
✓ Build Verification
✓ Security Scan
✓ Performance Tests
✓ Customer Comms
✓ Maintenance Window
✗ Rollback Plan
✗ CS Training Ack
DEPLOY · BLOCKED
Journey 04 · Compliance Officer

The auditor shows up unannounced.

David needs evidence for the company’s NIST 800-218 SSDF compliance posture. The Evidence Vault shows 28 of 28 practices mapped, with two minor gaps already flagged before the auditor finds them.

One click. 412-page signed PDF. 84 MB evidence ZIP. Tamper-evident. Generated in 90 seconds. The week he used to lose to evidence-gathering is now a one-click export.

NIST 800-218 SSDF · Posture
28/28
MAPPED
24
FULL
4
PARTIAL
ESTIMATED OUTPUT
412-page PDF
84 MB Evidence ZIP
Generated & signed in approximately 90 seconds
Journey 05 · VP Engineering

The offshore QBR that lands.

Anjali walks into the quarterly business review with three offshore partners. Three Partner Scorecards side by side, ranked by objective playbook adherence. Six metrics each. AI-generated talking points.

The conversation is no longer about vendor relationships. It is about specific metrics, specific engineers, and a clear renewal decision framework. Hard data wins every time.

Bangalore
8 ENGINEERS
92
â–² 6 PTS
Austin
4 ENGINEERS
79
â–¼ 3 PTS
São Paulo
6 ENGINEERS
61
â–¼ 14 PTS
Recommended action: São Paulo dropped 14 points. Conditional renewal with 60-day improvement plan, or scope reduction.
The Roster

Sixteen agents.
Three ship at MVP.

Each agent owns a phase of the SDLC. Six AI-era agents are P3 additions for the 2027 roadmap.

01 · MVP
Code Sentinel
Dev & Test
Hooks into every PR. Verifies coverage, code review, ticket linkage.
02 · MVP
Release Gatekeeper
Deploy & UAT
Blocks production deploys missing UAT signoff or rollback plan.
03 · MVP
Role Accountability
Cross-phase
RACI in real time. Powers the Accountability Score.
04
Test Evidence
Dev/Test, UAT
Auto-builds the audit-ready test evidence binder.
05
Offshore Partner
Cross-phase
Partner Scorecard for distributed teams. The wedge feature.
06
Playbook Coach
Cross-phase
“What do I owe to close this story?” Conversational guidance.
07
Requirements Auditor
Analysis
Flags vague stories. Drafts playbook-compliant rewrites.
08
Design Reviewer
Design
Cross-checks architecture against requirements. Multi-modal.
09
Production Watch
Maintenance
Traces incidents back to specific stories and PRs.
10
Executive Briefing
Cross-phase
Weekly leadership view. Phase health, partner scorecards, risk.
11 · AI-ERA
Provenance Tracker
Cross-phase
Captures which AI tool wrote which code, with prompts and model versions.
12 · AI-ERA
AI Code Reviewer
Dev & Test
Audits AI-generated code for hallucinations and license-tainted snippets.
13 · AI-ERA
Agent Behavior Monitor
Cross-phase
Watches autonomous coding agents the way Code Sentinel watches PRs.
14 · AI-ERA
Prompt Evidence Vault
Cross-phase
Stores prompts and outputs as audit artifacts for AI compliance regimes.
15 · AI-ERA
Authorship Classifier
Dev & Test
Detects human vs AI vs hybrid code. Enforces authorship rules.
16 · AI-ERA
License & IP Sentinel
Dev & Test
Scans AI-generated code for license-incompatible matches.
The Stack

Eleven integrations.
Three priority tiers.

SDLC Playbook takes real action in real systems. Read-only versus write actions are clearly distinguished, and every action is logged.

GitHub

P1 · MVP · Read + Write

Block merges via status checks. PR comments. Sub-PRs. Release tags.

Azure DevOps

P1 · MVP · Read + Write

Block pipeline stages. Update story status. Attach evidence.

Slack

P1 · MVP · Read + Write

Block notifications. Threads. Weekly briefs. Override approvals.

Microsoft Teams

P1 · MVP · Read + Write

Same as Slack. Required for Microsoft-shop federal customers.

Jira

P2 · Q2 · Read + Write

Refuse story closure. Audit comments. Block sprint close.

SonarQube

P2 · Q2 · Read only

Pull coverage and quality data. Read-only by design.

Snyk

P2 · Q3 · Read + Write

Security scan triggering. Block PRs on high-severity findings.

PagerDuty

P3 · Write only

Page on-call when production gate is overridden.

ServiceNow

P3 · Read + Write

Auto-create change tickets for production deploys.

DocuSign

P3 · Read + Write

Capture signoffs as legally-binding signatures for federal evidence.

GitLab

P3 · Read + Write

Same action surface as GitHub. Earned when first GitLab customer signs.

Need another?

Tell us in the design partner intake.

Ready when you are

See it in your stack.

Request a 30-minute demo. We’ll show you what the product looks like running against your repo, your tracker, your team.