Deterministic test-policy enforcement and AI-proof containment for source repo quality gates. Hash-pins engineer-owned testing config so AI-proposed threshold weakening is blocked at pre-commit. Includes escape-scan, CRAP, architecture, bias, and Gherkin-lint gates.
