production-change-gate

Gate the path from code to production with one checklist per question: is this change ready to merge, is this build ready to ship, and may this exact action run against production. Records a human decision and never executes. Triggers: 'is this ready to merge', 'is this build ready to ship', 'can I run this cf command in prod', 'authorize this production change'. Not for code review itself (reviewer) or for incident mitigation advice (incident-investigation).