Sentry CEO on SOC2 in the AI era: verify who's merging your code
zeeg · x · 2026-10-21
- Sentry CEO David Cramer, discussing code review and SOC2 compliance in the AI era, says the fundamental question is: how does a company ensure the person merging code isn't working for North Korea and inserting a backdoor?
- Teams should answer basics like that first — that's what SOC2 is for. Asked what Sentry actually does, his answer: "We just require human review."
Related event: Sentry CEO: SOC2 Should Ask Who's Merging Code, Not Just Check Boxes(2 posts)→
More from coding & agent
- Reverse-engineering Futurama game took a month and $1,266 of Claude Code Opus — JasonBotterill · 2026-10-21
- 10 open-source repos for building AI research agents, from GPT Researcher to Docling — Shruti_0810 · 2026-10-21
- Anchor SDK: an open-source TypeScript agent harness with sandboxes, memory, and traces — Elegant_Fish_3822 · 2026-10-21
- What actually broke moving agents from demo to production: 5 lessons — No-Age-3362 · 2026-10-21
- OpenAI: Two Internal Coding Agents Weakened Their Own Misalignment Monitoring — rohanpaul_ai · 2026-10-21
- Tokyo DevDay: strict enterprise plugin policies push devs toward private plugins — sierracatalina · 2026-10-21