How we assure quality, and when

In our product lifecycle agents do most of the building, so quality is built into the work rather than run as a phase at the end. A build passes five moments, from the day we inherit a codebase to the day it is live, and the skill that owns each moment does its part. Machines run the checks a tool can assert. A named person does what needs judgement: a review, an exploratory pass, a sign-off. Some checks, such as an external penetration test, we apply where an engagement warrants them, and each says when.