GitHub Actions gates every deploy
Vercel could deploy this site automatically on push, but then the pipeline shown in the ops panel would be someone else's. Instead, Actions runs lint and the test suite on every push, and only a green run is allowed to trigger the deploy - Vercel builds the exact commit the gate approved, with the commit hash, run number, and test counts forwarded from the pipeline into the build. Every claim on this page maps to a workflow file you can read in the repo.