Pair-programming is one option. It might seem expensive at first glance but usually both parties get a lot of value from it (new possible ideas for the teacher if the learner isn't entirely junior and obviously quick learning for the new person)
We do pair programming for new hires, works well. I'm
currently frustrated because our code reviews are both mandatory due to security certifications but also completely worthless to our team structure except Slack spam asking someone to click the approve button.
* The work that is done is decided beforehand, the code in every PR corresponds to a card that's already been discussed.
* There's no incentive whatsoever to "sneak something in" and if you do so maliciously you'll be fired and maybe prosecuted depending on the damage.
* Your code goes through integration testing and QA so you'll never (immediately) take down prod.
* I have backups coming out my ears that assume the code running on our app servers is actively malicious so you couldn't cause data loss if you tried.
* Norms are all enforced in code, which makes discussions about style pointless. If it passes CI it's good enough.
To play devil's advocate:
"* There's no incentive whatsoever to "sneak something in" and if you do so maliciously you'll be fired and maybe prosecuted depending on the damage."
How would you discover the snuck in code in a timely fashion?
