HIGH. The engine starts shipping against main with no check that main's own CI is green. The passband run delivered 20 PRs while E2E had been red for days — onto a dead canary, where a real regression could hide. Add a one-agent baseline gate before for (const t of plan): gh run list --branch main for the required (and ideally E2E) checks; if red/unknown, halt or confirm-gate before delivering anything. Cheap, deterministic, prevents compounding failures on a broken baseline.
Filed 2026-06-14 from the delivery-train process-safety audit (after the 22-ticket passband run). Engine: .claude/workflows/delivery-train.js. Anchor failure: #1639 — architect committed an ADR, implementer opened no PR, reviewer got "PR #0", ticket dangled with a stranded branch + leftover worktree.
HIGH. The engine starts shipping against
mainwith no check thatmain's own CI is green. The passband run delivered 20 PRs while E2E had been red for days — onto a dead canary, where a real regression could hide. Add a one-agent baseline gate beforefor (const t of plan):gh run list --branch mainfor the required (and ideally E2E) checks; if red/unknown, halt orconfirm-gate before delivering anything. Cheap, deterministic, prevents compounding failures on a broken baseline.Filed 2026-06-14 from the delivery-train process-safety audit (after the 22-ticket passband run). Engine:
.claude/workflows/delivery-train.js. Anchor failure: #1639 — architect committed an ADR, implementer opened no PR, reviewer got "PR #0", ticket dangled with a stranded branch + leftover worktree.