why on earth would you have a direct main CD pipeline without proper protections against pushing straight to that branch?