A stray commit buried multiple levels deep cost me months. Why the DB layer must own every commit and transaction plus how to enforce these rules using AST and linters.