Hipp 

Doctrine

• deployed ≠ loaded.Merged is not deployed. Deployed is not what the user's machine actually runs. Verify at the byte the user loads, on the path the user takes.
• Honest RED / GREEN.A red with evidence beats a washed green. "Unverified" is a verdict too; never dress a weak zero as a PASS.
• Real infrastructure over stubs.A unit round-trip cannot prove what the network will refuse. Format or transport changed? The real end-to-end runs before release, not after.
• The fixer is not the verifier.Whoever writes the fix, someone else walks it. Fresh context, cold start, no shared assumptions.
• Receipts over vibes.Success is a durable receipt, not a transient edge that might never fire. If a postcondition went unverified, say so loudly and say what to do next.
• Exact heads only.A review is byte-specific. The head moved? Prove equivalence or read it again.

This page gates itself

④ is yours: inject a fault and watch the page report an honest RED instead of pretending.