The financial, protocol, visual and roadmap checks all ran on push and pull request only. That gap mattered most for money, because the 22 financial invariants examine DATA — a payout stuck mid-transfer, a paid order never disbursed, a ledger cache drifting from its entries. None of those are caused by a code change, so a check that only runs on code changes would never have seen them; quiet weeks were exactly the weeks nothing was watching. All four now run nightly. The roadmap verifier was also crashing before it read a single row and reporting success anyway, because a piped command returns the exit status of the pipe rather than the program. It can now both run and fail. Dependency and vulnerability scanning were added at the same time — nothing had been watching for either.