Best Practices

> By having the Gemfile.lock diff on GitHub we'll be able to review gem upgrades. 

What do you mean? We have Gemfile.lock in git all the time. GitHub just ignores it by default