I agree, but enterprise or large orgs usually are happy about enforcing strict rules even for internal tools. You deploy tool to 100 internal employees and wors

I agree, but enterprise or large orgs usually are happy about enforcing strict rules even for internal tools. You deploy tool to 100 internal employees and worst that can happen is someone will have to have longer coffee break because your deploy didn't work. Then you still have to do 1h of paperwork for this internal tool and then another 1h of paperwork for hot fix. That is not how you do risk management.