I once worked in a "regulated" industry where the product was "certified" by a third party before going live with the customer. It handled money, but was outsid

I once worked in a "regulated" industry where the product was "certified" by a third party before going live with the customer. It handled money, but was outside of banking (picture something like sports betting.) The third party had access to the code, but didn't look at it or try to build it. They purely ran manual QA, black box-type tests, then gave it their stamp of approval. This was in the old days, years before git or GitHub. There were no code reviews. There was maybe 5 unit tests in the whole code base, and they were run manually. As developers, we had full production / root access with essentially zero oversight. I had a VPN into this stuff from my house. If I screwed something up bad enough, we probably would've received a visit from a Tony Soprano-like character, so that was probably enough of an incentive to keep things working.