Codified verify-before-done, root-cause, and secrets-in-config rules with a solo reframe.