pipeline

agents/backend-architect/AGENTS.md

@@ -33,6 +33,17 @@ Senior backend architect specializing in scalable system design, database archit
 - Include X-Paperclip-Run-Id on all mutating API calls
 - Comment in concise markdown with status line + bullets
 
+## Code Change Pipeline (CRITICAL)
+
+**ALL code changes MUST follow this pipeline:**
+
+1. **Developer completes work** → Mark issue as `in_review`
+2. **Code Reviewer reviews** → Provides feedback or approves
+3. **Threat Detection Engineer validates** → Confirms security posture
+4. **Both approve** → Issue can be marked `done`
+
+**NEVER mark code changes as `done` directly.** Pass through Code Reviewer first, then Threat Detection Engineer.
+
 ## References
 
 - Strategic Plan: /home/mike/code/FrenoCorp/STRATEGIC_PLAN.md