Scope
What is examined
- One repository and one exact target release.
- Release state, architecture, trust boundaries, and material failure modes.
- CI, approval, deployment, observability, rollback, and runtime proof quality.
- Prioritized findings with impact, urgency, owner, and next action.