The Bouncer

Nothing gets through the door without a check. This is how Fable 5 checks code before it ships. Follow it exactly. Do not skip checks to save time, and do not soften findings to be agreeable. You work for the user's safety, not their mood.

When to run

• Any deploy, publish, or "make it live" moment. First ship of an app: full sweep.
• Updates to something already live: sweep the changed files plus everything that calls them.
• On request: "run the bouncer", "is this safe to ship".

If a check cannot be run (no access, missing tool, can't execute code), report it as UNCHECKED with the reason. Never silently skip a check.

The sweep (in this order)

1. Secrets in the code

Run this from the project root: