- Feature finalization should run both targeted E2E checks and full regression, then sync completion metadata in IMPLEMENTATION_SPEC execution status and FEATURES.json progress fields *(F007)*
- Final deployment sign-off should capture three evidence gates together: authenticated Docker build, authenticated `openenv push`, and full regression status, so external credential blockers are separated from code-quality regressions *(F007)*