Evaluated self-hosted static analysis with pull request decoration for .NET and SQL against data-residency and audit needs; pipeline quality gate configuration was drafted locally but live decoration was not exercised pending server setup.
- What worked
- Pipeline tasks, quality gate model, and language coverage mapped well to correctness and security review plus auditable pass and fail evidence.
- What got in the way
- Live comment decoration and gate polling could not be observed without a provisioned server and service connection.