Governance

Safe and fast
is not a trade-off you have to make.

You choose which controls apply and who signs each one. A control you switch on cannot be skipped — the app stops there until your approver answers — and every yes and every no is recorded for an auditor: name, time, what it applied to.

The first yes

Is this worth building?
Someone answers that first.

Every other tool starts you on a blank page. This one starts with a short form your company wrote, sent to the people your company says decide. It takes a minute to fill in, and it is the only step that can save you the entire build — because the question is not “can we do this?” but “should we, and who says so?”

Request for an appNW–2026–0417
What is it
Van safety checks
Who is it for
Our drivers · 40 people
Why now
Two vans went out unchecked last month
How big
Small
What it uses
Staff names and van records. No customer details.
Asked byA. Vásquez · Depot manager17 Apr, 09:06
Answered byD. Okafor · Operations17 Apr, 09:12
ApprovedD. Okafor · 09:12
Northwind wrote
every one of these
Ana cannot say
yes to her own
How the yes works
  1. 01
    Your questions, not oursYour company writes this form. We do not supply the questions, because a delivery depot and a hospital do not ask the same things before they spend money.
  2. 02
    It goes to the right people, in orderOne person, or several, in the order you choose. The second person is not asked until the first has answered. And the list of who decides is locked in the moment you send it, so nobody can change it halfway through.
  3. 03
    You cannot approve your ownThe person who asks is never the person who says yes. This is not a warning you can click past — if the two are the same person, the software simply refuses.
  4. 04
    It will not sit forgottenIf nobody answers, it moves on to the next person instead of dying in an inbox until you give up and go back to a spreadsheet.
  5. 05
    Or switch it offIf your company would rather people just start building, turn this off and they can. That is a real choice, and it gets written down like every other one.

The people, the company and the reference number here are made up. The form, the refusal to let you approve your own request, and the order people get asked in are real.

One app, all the way through

It does not move
until somebody says yes.

Here is one app going from a request on a phone to something the drivers are using. Each barrier is a real person or a real check, and it stays down until that person has looked at what they are approving. Seven hours, start to finish.

Ana runs the depot.
She has never written code.
DOD. OkaforOperations
YES · 09:12
01The request
Is this worth building?
RMR. MehtaDepot lead
YES · 11:04
02The plan
Is this the right plan?
ChChecksTests and scans
PASSED · 14:48
03The trial run
Does it actually work?
SGS. GrantHead of IT
YES · 16:31
04Going live
Ready for everyone?
Van safety checksOn the web, on their Macs, on their phones
Seven hours.
Everyone who said yes
is named.

The people, the company and the app here are made up. Your company chooses which of these approvals it wants. The ones you switch on cannot be skipped — the software will not let anyone past them.

Who has to say yes

You choose who has to approve.
Then nobody can go around them.

Here is every point where your app can be stopped, and who stops it. Switch on the ones your company cares about and leave the rest off. Anything you switch on is enforced — it is not a rule in a document somebody can ignore, it is something the software will not let anyone past. Every yes and every no goes into one list.

Not sure?
Switch one on in watch mode
and see what it would
have stopped.
01Before you start
  • The request
    Should we build this at all?
    once per app
02While it is built
  • The plan
    Is this the right plan?
    once per app
  • A person reads the work
    Someone checks each change by hand.
    every version
  • A computer reads it first
    Problems get caught before a person looks.
    every version
03Before anyone tries it
  • Is it what you asked for?
    Someone compares it to the plan.
    once per app
  • The tests
    Everything that worked still works.
    every version
04Break-in test
  • Someone tries to break in
    A report, tied to this exact version.
    every version
05Rules and wording
  • The rules you work under
    A certificate for this version, this rulebook.
    once per app
  • Legal reads it
    Someone checks what people are agreeing to.
    every version
  • What it says to customers
    Someone reads the wording people will see.
    every version
06Going live
  • Your team tries it
    It goes somewhere real people can use it.
    every version
  • Security problems block it
    A release waits while serious problems are open — and an app nobody has scanned is not cleared either.
    every version
  • It goes live
    Everyone gets it.
    every version
A named person decides A check decides — a scan, a test, a report Every one of these is optional
Every yes and every noOne list. Hand it to an inspector without preparing anything first.
WhenWhat was checkedResultWhoDetails
17 Apr · 09:12The requestClearedD. OkaforVan safety checks — yes, worth building
17 Apr · 14:31The planClearedR. Mehta12 checks, with photos
18 Apr · 10:02The workClearedAutomaticNothing blocking, 3 things to tidy
18 Apr · 11:47SecurityBlockedAutomatic2 serious problems — release held
19 Apr · 09:26SecurityClearedAutomaticBoth fixed. Nothing serious left
19 Apr · 16:31Going liveClearedS. GrantApproved this exact version

These are the real checks, described in plain words. One detail worth knowing: the check that holds a release back is the security scan. The break-in test is a separate thing and does not, on its own, stop a release from going out. The people, the app and the times above are made up.

On your phone

All of it fits in your hand.
Including saying no.

The same questions, the same stages, the same approvals. Start an app from the loading bay. Watch it get built on the train. Say yes to it going live from the back of a taxi — after reading exactly what is about to change.

What is waitingOnly what needs you
One decisionSee it, then decide
Said yes from a taxi, 16:31.
The workWatch it get made
You see the thing, not a noticeA request shows you its answers, question by question, in your company’s own words. A plan shows you what the app will actually do. A release shows you exactly what is changing. You read it before you decide.
It will not let you press the wrong buttonIf it is not your decision to make, there is no button. Instead it tells you whose decision it is, and how many people have already answered.
It only shows what is yours to answerThe number on the badge is what is waiting on you — never what you have asked other people for. One list, covering every company you work with.

The people, the app and the times here are made up. The screens, and the buttons they refuse to show you, are real.

Turn on the ones you need.
Leave the rest off.

A depot and a teaching hospital do not need the same approvals. Start with none of them and switch on what your company actually cares about — or run one in watch mode first and see what it would have stopped.