Put the project in org Git so a second engineer can ship
Personal repos and laptop-only deploys strand products. This handoff puts the tree on an org remote, sets branch rules, keeps secrets out of history, and proves a second engineer can ship without you. An account is a person's GitHub login; a seat is a paid place for that person in an organization's plan. Keep the code you built. Stop being the only key.
GitHub handoff means the project lives on an org remote, merges need a second pair of eyes where you use review, secrets stay out of history, and another engineer can ship from a clean clone. You keep the work. You stop being the only person who can deploy.
Where founder-only Git breaks
If only you can push, you cannot go on holiday
Builder export to a personal repo feels done. It is not handoff until org ownership and a second ship pass.
Repo under a personal account
Move to the org. Transfer admin. Document access.
Main accepts anyone’s push
Protect main. Require review where the team is bigger than one.
Secrets committed from the builder era
Purge or rotate. Use host vaults — not .env in Git.
“What impressed us most about CodeCross was their ability to deeply understand our vision and translate it into a complete digital solution. Unlike many agencies that just focus on technical delivery, CodeCross approached our project like true partners.”
The remote sits under the company org, at least two admins exist, and the founder’s personal account is not the only path to push or delete. Transfer complete — not a fork you forgot.
Which branch and review rules stop founder-only merges?
Protect main, require a pull request, and require one review when a second engineer exists. Solo founders still protect main and use CI checks so laptop force-pushes are harder.
How do you keep builder secrets out of Git history?
Never commit .env or panel dumps. Scan history once; rotate anything that appeared. Load secrets from the host vault on deploy.
What proves a second engineer can ship without the founder?
They clone on a clean machine, install from lockfiles, run start, and complete one promote — without screenshares or the founder’s laptop env.
Do not leave production on a personal login.
Bring the current remote and who holds admin. We put org Git and a second ship pass in place.