Trying to convince my students that having all your security policy changes include a design doc describing the status quo, the desired outcome, why this change will achieve it, why alternatives were rejected, and then implementing it via some automation schema so it can't accidentally be reverted for no obvious reason is good actually

@mjg59 Agile dev: Documentation is a waste of time; instead spend hours estimating work in imaginary units of effort. Agentic AI dev: there will be a 500:1 ratio of documentation to code, which nobody reads.

Development "best practices" change like Jean styles.