List your independent validation gates

The prompt

Enumerate every independent validation gate this repository's pipeline actually runs: unit tests, integration tests, terraform fmt/validate/plan, policy-as-code, SAST, SCA, container scanning, secrets scanning, artifact integrity. For each missing one, propose the smallest addition that would close the gap.

Why it's built that way

These gates are independent on purpose — an agent's own confidence is not one of them. A confident natural-language answer is not evidence that a build, policy check, or deployment is correct.

What to do with the answer

Add the highest-value missing gate (usually secrets scanning or SCA, if either is absent) this week, not as a someday item.