The stage where I'd keep the tightest human gate is test, because an agentic SDLC that writes both the code and the tests can quietly converge on tests that pass instead of tests that matter. Once the same system authors the spec, the implementation, and the check, your independent signal disappears. Where in the lifecycle do you keep an evaluation the agents can't author themselves?