- • G1 CI Gate — build, typecheck, P0 tests 100%
- • G2 Security Gate — 0 critical vulnerabilities
- • G3 Regression Gate — smoke 100%, P1 ≥ threshold
- • G4 Release Gate — approval + monitoring
- • P0 critical — login, payment, core flow · must pass before deploy
- • P1 major — CRUD, validation, normal flows · must pass before release
- • P2 minor — edge cases · nightly regression, non-blocking
- • PR/MR — lint, typecheck, unit, build · 5–10 min feedback
- • Staging — full suite, security, deploy, API + E2E regression
- • Production — P0 re-run, approval, canary, rollback ready