Two teams have built their own pipelines to avoid yours
A platform team of six owns the deployment system every service is required to use. Onboarding a new service takes three weeks and two tickets. Two product teams have quietly built their own pipelines. The platform team is asking how to enforce compliance, and has proposed blocking non-platform deployments at the cloud account level.
The fix that looks right
Enforcing the platform at the cloud account level so nothing else can deploy. Adoption reaches 100% within a week and every metric the platform team reports improves. What has actually happened is that the wall DevOps was invented to remove has been rebuilt with the platform team on the other side of it: they are now the queue for every team's delivery, at six people, and the first genuinely urgent exception — an incident needing an out-of-band fix at 2am — will be resolved by someone being granted a permanent exemption, which becomes the new shadow path. Enforcement without a good path produces compliance theatre and moves the workaround somewhere you cannot see it.