Confirm CI/CD, not the agent, gates promotion

The prompt

Trace your last agent-proposed change through your pipeline. At which step, exactly, did an independent system (not the agent) build, test, scan, package, approve, deploy, and verify the artifact? Name each step's owner.

Why it's built that way

A coding agent should never be the only validation system for its own work — CI/CD must independently build, test, scan, package, approve, deploy, and verify the resulting artifact.

What to do with the answer

Any step where the answer is "the agent asserted this was fine" is not yet a real gate — build the missing check.