Last year our platform team turned on every scanner we could find in one sprint: static analysis, dependency scanning, secret detection, container image scanning and Terraform checks, all set to fail the build on anything. The first week produced 1,900 findings across 40 repositories. By the second week, the most common way to merge was an admin override, and the security channel had become a place where people asked how to make the red X go away. The scanners were not wrong. The gate design was...