I’d build this as an engineering standards system with four layers:

1. What engineers must do.
2. How repositories and pipelines enforce it.
3. What a service must satisfy before production.
4. How you measure whether the system is working.