Preview is the code review
If a stakeholder cannot click a preview, the PR is not done. We wire Vercel or equivalent previews to every branch and block merge on lint, typecheck, and a smoke suite against that URL.
Database migrations run in a gated job with a documented down path. Friday deploys are boring when rollback is one click.