Ad-hoc SQL in production
Someone pastes a statement into a prod console at 6pm. There is no review, no record, and no way to know what actually ran.
Use case · Migration approvals
Application code gets pull requests, tests, and CI. Database changes deserve the same bar. Shipyard puts every schema change behind validation, review, and explicit approval — before a single statement runs.
The problem
Someone pastes a statement into a prod console at 6pm. There is no review, no record, and no way to know what actually ran.
A screenshot of a query and a thumbs-up emoji is not an approval process. Context scatters and accountability evaporates.
A blocking index build or destructive statement slips through because nothing checked the SQL before it hit the database.
How Shipyard helps
Shipyard gives database changes the same lifecycle your application code already has — proposed, validated, reviewed, approved, released.
Propose schema changes as ordered, multi-statement migrations targeting one database — with a title and context reviewers can actually evaluate.
Engine-aware rules check every statement before review. Destructive patterns and risky operations are flagged early, with thresholds you control.
Decide who can approve, who can release, how many distinct approvals are required, and whether authors may approve their own work.
Designated releasers apply approved migrations through a dedicated write connection, immediately or scheduled for a quiet window.
How it works
Connect your databases
Add read and write connections per database, organized by project and environment.
Set the approval bar
Configure reviewers, releasers, required approval count, and self-approval policy per project.
Propose and review
Engineers draft migrations, validation runs automatically, and reviewers discuss in threaded comments.
Apply with confidence
Approved changes are released through the controlled write connection, with the full history recorded.
Set up your first governed migration in minutes — self-hosted or managed.