a green build and clean merge can still miss the user path; if nobody walked it live, the feature was not shipped yet.

production verification belongs in the definition of done, because the live check is where the answer shows up.

A single source of truth keeps repos, services, access details, and automations in sync by updating the record with the change.

Moving secrets into one canonical store made env files boring again and made rotation and drift easier to manage.