Escalated Visa support model concerns to Greg
Situation
Escalated concerns about CIQ support arrangement with Visa to Greg and Bjorn. Questioning why CIQ is on the hook to support Rocky Linux (which CIQ does not build) for Visa, rather than having Visa use RLC so CIQ can actually fix their issues.
Reasoning
Supporting Rocky Linux (which RESF builds, not CIQ) puts engineering in an impossible position - cannot fix what you do not build. This is a business posture issue - CIQ support commitments should align with what CIQ can actually deliver. Visa is an old wart with a wrong/unsupportable support plan (Bjorn agrees). The specific CVE issue today is a symptom of the larger structural problem.
Additional Context
A CVE remediation request for Visa triggered this escalation. Visa is on Rocky Linux but has a CIQ support contract. When RESF does not patch issues in a timely manner, CIQ is stuck - cannot fix Rocky, but is on the hook for support. Peter wants clarity on whether this model should continue or if Visa should move to RLC.
Observed Evidence
From Slack #distinguished-leaders: Peter requested 10 minutes with Greg to discuss Visa issue. Stated he does not like the business posture - CIQ supporting something CIQ does not build. Asked why Visa is not on RLC. Called the current situation crazy/unsupportable/wrong. Also noted in DM with Max: The current process is not what we want, Visa is a very special very old case, support plan is wrong and dumb, Bjorn agrees.
Matching Patterns
Confidence Breakdown
Reasoning Depth Analysis
Related Context
slack
I want to talk about what you expect Greg when CIQ says we support something, why we arent telling Visa to sit on top of RLC instead of Rocky so I can actually fix their stuff. The situation we have set up with Visa seems... crazy/unsupportable/wrong...
Outcome
Clear alignment with Bjorn. Will move Visa to RLC.
Rating: 5/5
Decision ID: 97e97fc7-3331-4651-a369-fa59b86fd50e