Secure access before requesting changes
Inventory repositories, hosting, domains, databases and external services. The business should know who controls accounts and which rights the agreement provides. Transfer secrets through an appropriate secure method, not in an open project brief. Missing access is a separate task, not something solved by writing more code.
