4.2 The numbers to keep
The cost rows are teaching numbers from this volume, not a survey and not a company's invoice.
- Requirement: 1x, about Rs 100, erase a sentence.
- Coding on a laptop: 5x, about Rs 500.
- CI/CD SAST: 10x, about Rs 1000, the pipeline rejects the commit.
- QA on staging: 15x, about Rs 1500, a Jira ticket.
- Production: 100x and beyond, Rs 100,000 and beyond, because a leak, fines, and lost trust do not stay on a neat multiple.
The rule of 100x: catch bugs on the left.
DORA goals in this book, not a measured industry table:
- Deployment Frequency: multiple times a day.
- Lead Time for Changes: under 1 hour.
- MTTR: under 30 minutes.
- Change Failure Rate: under 5%.
Security scan coverage is the share of builds that ran a security scan. It is not a DORA metric. Class arithmetic only: 16 of 20 builds is 80%. Not a company statistic.
Pencil check: requirement about Rs 100, pipeline about Rs 1000, which is ten times the first row in this tale. Do not flatten production into a tidy Rs 1000. The plus sign is the memory test.