Blast-Radius Sizing
Every pass is sized first by the outermost circle a failure would reach — Contained, User-facing, or Downstream — so the depth of verification scales with the change's real risk. Sizing never skips the pass; even the smallest change drives its happy path.