CI/CD & quality-gate setup
One deterministic rule set - format, lint, types, tests, coverage, security - that runs identically in the editor, before push and in CI. Ratcheted so legacy code can adopt it on day one.
- GitHub Actions pipelines
- Pinned toolchains via mise
- Secret scanning & SAST
- Baseline + ratchet strategy
- Team hand-over docs