There is this dichotomy - companies say they want stable codebase with clear justifications for each chnage (at least heavily regulated companies do).

But good practise here is continual refactoring - almost inimicable to that stability plus imagine the final sign off comes from business who don’t understand why you rewrote a codebase that they signed off two months ago and now have to re-confirm