The nine checks · written for your engineering lead

Nine gates. One of them only a person can close.

Each gate stores its own evidence, and a task moves only when every gate it needs is green. Eight of nine is not a pass. If you are not the one reading the code, the short version is on the home page.

01

Tests written

Characterization tests come first on any shared path. A test written after the fact tends to describe what the code does rather than what it should do.

02

Tested (ran & passed)

Not that tests exist. That they ran, and the run is recorded. The gate closes on an exit code, not an assurance.

03

Code reviewed

A review with a named reviewer attached. The evidence is the review, not a tick.

04

Architecture validated

Checked against the project's architecture rules: choke points, invariants at every write site, migration order. This is the gate that fails most often, and it is the one worth failing.

05

Error handling done

Boundaries log. Failures surface. Nothing gets swallowed into a silent empty state, because a 429 should read as a 429.

06

Security reviewed

New routes carry permission checks and tenant scoping is proven in SQL rather than in the application layer.

07human only

Screenshot verified

A person looks at the screenshot. This is the human gate and the only one an agent cannot close. A surprising screenshot is a bug.

08

QA test cases created

The cases go into the suite that runs next time, so today's feature becomes tomorrow's regression net.

09

Internal docs updated

A rule learned during a build goes into its canonical document in the same change. A build that taught something and did not file it is not finished.

Gates are per project, not global.

A payments service and an internal dashboard should not answer to the same bar. Each project carries its own gate set and its own enforcement profile, so a team can require a security review where it matters and skip it where it would be theatre.

DevFactory is in private beta.

We run it on our own builds before we run it on anyone else's. If you are paying for AI tools and cannot tell what you are getting back, tell us what that looks like from where you sit.

Request access