# Release Readiness Gate

- [ ] Architecture tests pass.
- [ ] Static analysis passes or accepted warnings are documented.
- [ ] `php artisan app:architecture-scan --fail-on=error` passes.
- [ ] Route inventory diff reviewed.
- [ ] OpenAPI updated.
- [ ] Deprecated endpoints documented.
- [ ] Security-sensitive changes reviewed.
- [ ] Cross-school access tests pass.
- [ ] Extension boundary tests pass.
- [ ] No bulk send bypasses preview.
- [ ] No payment file endpoint serves by filename alone.
- [ ] No report export bypasses audit.