It also won't pass a SOC 2 audit if people can just commit anything and ship it to production with no oversight.