Baseline audit before touching the agent

Before involving an agent, document the target codebase - file count, current test coverage percentage, and the five riskiest files by dependency count and test coverage. Commit as baseline/audit.json.

Every claim you make later about the pipeline's value is measured against this file. An audit taken after starting is contaminated by what you have already changed.