workflow-quality-gate — Pre-Release Go/No-Go

Run before any production release. Each skill contributes a specific defect class. The combined result is a single verdict.

Gate sequence

1. RED-TEAM   → test-red-team    (adversarial: UX + pipeline + security + perf)
2. SECURITY   → audit-security   (static code review: OWASP, auth, RLS, secrets)
3. BUNDLE     → audit-bundle-size (JS payload: lazy loading, tree-shaking, chunks)
4. PERFORMANCE→ audit-performance (Core Web Vitals, LCP, CLS, INP)
5. UNIT TESTS → test-unit        (coverage gaps, regression suite green?)

Run gates in order — earlier gates often surface issues that make later gates redundant or change their scope.