Hey Peter!
- Most teams start in shadow mode with the default, lower approval threshold until they’re comfortable with the risk classification.
- Shadow mode doesn’t approve PRs - it leaves a comment explaining whether cubic would have approved the PR and why
- Once they’re comfortable, they switch it to live mode.
- Some larger teams do create a service account, especially if they want a clear audit trail or tighter control over which repositories it can approve in.