QuestionQ9

VerifiedGovernance, Safety & Risk Management

An engineering organization is rolling out Claude Code across 200 developers. A team lead proposes that AI-generated pull requests bypass the standard code-review process for changes under 50 lines, because small changes are viewed as low risk and review capacity is limited.

Which two Diligence-competency objections should you raise? Each correct answer presents part of the solution. (Select two.)

Choose two
Explanation

AI-generated changes still require verification before integration; Anthropic’s security guidance assigns users responsibility for reviewing proposed code and advises reviewing all suggested changes before approval. Line count does not represent the security, correctness, authorization, configuration, dependency, or operational impact of a change, so it cannot safely determine whether review may be bypassed. Automated review can supplement, but does not replace, existing manual code-review and security practices.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!