Source code integrity

- Commit signing and verification (GPG, SSH, GPG) - Branch protection and review enforcement - Dependency rule files (package-lock, pip-tools, go.sum) - Security code review gate - Pre-commit hooks for secrets and security