Why go/no-go decisions still run on faith in contracts, and the gap between pipelines that prove correctness and pipelines that produce evidence.