Law 5. No float for money. No exceptions. No ‘it's fine for this use case.’ No.
Law 6. Every public-facing AI feature is an injection surface until proven otherwise.
Law 7. The best debugging prompt is a complete Evidence Brief. Fill it before you start.
Law 8. Prompts are code. Code that is not version-controlled, reviewed, and tested will degrade.
Law 9. An agent given a vague specification does not produce one bug. It produces a system of bugs.
Law 10. The Specification Gap never closes itself. Only deliberate engineering practice closes it.