Escape rooms are built to be escaped. One team, sixty minutes, a sequence of
locked doors where the key to each is hidden in the room before it.

Your delivery pipeline was not built to be escaped. It just is.

This talk walks a single unbroken chain from "ordinary employee with a source
control account" to "organization administrator of the entire cloud estate",
without a single CVE, exploit, or memory corruption bug. Every door is a
configuration someone chose deliberately, for a defensible reason, in isolation.
Eleven of them in a row is a catastrophe.

We pick the locks in order. Default write access nobody audits. A Terraform plan
that runs attacker code before a human reviews anything. An environment gate that
turns out to be a kitchen timer. A federation trust that checks the wrong claim.
An IAM edge that lets a service account promote itself. Then we run the whole
thing again as a speedrun, with the clock on screen.

Bring your own pipeline. You will want to go and check something afterwards.