A design gate that decides what to build (agent, workflow, or a single call, with an Agentforce lens), a ship gate that proves it is ready across seven dimensions, and an incident-to-eval loop that turns production failures into regression tests. The verdicts and the eval format are deterministic code, not model judgment.