In the first 11 days of running the dependency workflow, the backlog of open issues fell by about 70%.
Erin SonSenior Engineer · Practitioner, 
Shopify
Post: How River takes security work from a fix to merge, Shopify engineering blog, September 2, 2026.
Erin Son, Senior Engineer. Engineer describing Son's own team's security workflow; the post is the company's own publication.
Checked against the source by a first reader, then confirmed independently by a second reader who fetched the source without seeing the first reader's notes (Independent review agent (Claude Sonnet), blind second pass from passage text and citation only, no repository access, 2026-10-31).
Exact match in the results paragraph. The byline is Erin Son / Kaiyi Li (co-authored), so attribution to Erin Son is as a co-author.
Erin Son (Shopify), “How River takes security work from a fix to merge”, Shopify engineering blog, 2026-09-02. https://shopify.engineering/river-vulnerability-remediation Archived at https://the-ai-record.com/passages/shopify-first-11-days-running-dependency-workflow-backlog-2026
Since launch, security merges through our freshness-gated merge queue went from about 10% to 80%.
Erin SonSenior Engineer · Practitioner, Shopify
Post: How River takes security work from a fix to merge, Shopify engineering blog, September 2, 2026.
Something wrong? Report a correction. JSON: /api/v1/passages/shopify-first-11-days-running-dependency-workflow-backlog-2026.json