Instead of gating at review time, an org could gate at deployment time to achieve that SOC2 compliance. It appears that Netflix does do CR: "Netflix uses a fea

Instead of gating at review time, an org could gate at deployment time to achieve that SOC2 compliance. It appears that Netflix does do CR: "Netflix uses a feature branch workflow, where developers create new branches for each feature they're working on. These branches are then reviewed through a pull request process, where other developers can review the code and provide feedback" [1] [1] https://medium.com/@seyhunak/learning-best-practices-from-netflix-tech-stack-ci-cd-pipeline-a25a58f46711 https://medium.com/@seyhunak/learning-best-practices-from-ne...