Enforce red-green-refactor with hard gates

Failing test first, watch it fail, minimal code, watch it pass, commit — no code born before tests.