Put the project in org Git so a second engineer can ship
Personal repos and laptop-only deploys strand products. This handoff puts the tree on an org remote, sets branch rules, keeps secrets out of history, and proves a second engineer can ship without you. Keep the code you built. Stop being the only key.
GitHub handoff means the project lives on an org remote, merges need a second pair of eyes where you use review, secrets stay out of history, and another engineer can ship from a clean clone. You keep the work. You stop being the only person who can deploy.
Where founder-only Git breaks
If only you can push, you cannot go on holiday
Builder export to a personal repo feels done. It is not handoff until org ownership and a second ship pass.
Repo under a personal account
Move to the org. Transfer admin. Document access.
Main accepts anyone’s push
Protect main. Require review where the team is bigger than one.
Secrets committed from the builder era
Purge or rotate. Use host vaults — not .env in Git.
No proof a second person can ship
Have them clone, install, and promote once.
The handoff week
Org remote → rules → second ship
Order matters. Proof last seals it.
01
Transfer or recreate under the org
Admins named. Personal sole-owner ended.
02
Set branch and review rules
Main protected. CI required if you have it.
03
Scrub secrets from history and docs
Rotate anything that leaked.
04
Second-engineer ship drill
Clean clone to promote without the founder.
How to
How to hand off a vibe app to org Git
Ownership, rules, proof.
Step 01
Create or transfer the org remote
Two admins minimum.
Step 02
Push the builder export with lockfiles
Pin versions. Write the start command.
Step 03
Protect main and name merge rights
Review where team size allows.
Step 04
Move secrets to the host vault
Rotate builder-era values.
Step 05
Watch a second engineer ship once
That is the done check.
Read next
Proof, the essay, and sibling intents
These pages are already on the site. Use them to pressure-test the bet before a call.
“What impressed us most about CodeCross was their ability to deeply understand our vision and translate it into a complete digital solution. Unlike many agencies that just focus on technical delivery, CodeCross approached our project like true partners.”
The remote sits under the company org, at least two admins exist, and the founder’s personal account is not the only path to push or delete. Transfer complete — not a fork you forgot.
Which branch and review rules stop founder-only merges?
Protect main, require a pull request, and require one review when a second engineer exists. Solo founders still protect main and use CI checks so laptop force-pushes are harder.
How do you keep builder secrets out of Git history?
Never commit .env or panel dumps. Scan history once; rotate anything that appeared. Load secrets from the host vault on deploy.
What proves a second engineer can ship without the founder?
They clone on a clean machine, install from lockfiles, run start, and complete one promote — without screenshares or the founder’s laptop env.
Do not leave production on a personal login.
Bring the current remote and who holds admin. We put org Git and a second ship pass in place.