A model that writes a page is confident whether or not it is correct. That is fine while you are drafting and dangerous the moment you press publish, because the failures are not dramatic. Nothing explodes. A link quietly goes nowhere, a form quietly posts to nothing, and you find out from the ad spend.
So before a page can go live, landflow runs a gate. It is six checks, it runs while you watch, and its result is shown rather than hidden.
One: exactly one lead form
Two forms on a landing page means two conversion paths and no clean number at the end of the week. If generation produced a second one, the gate fails and offers to merge them.
Two: every in-page anchor resolves
In-page navigation is generated from the section list, and the section list changes while you edit. An anchor pointing at a section you deleted is the most common breakage in the product, so it is checked on every publish rather than at generation time.
Three: images are licensed and locally hosted
Nothing hotlinks. Every image is re-hosted on your own domain before it can appear on a published page, with its licence recorded. A page that loads a photo from somewhere else is one takedown away from a hole in your hero.
Four: the mobile viewport is rendered, not stretched
We render the page at phone width and look at it, rather than trusting that a desktop layout will reflow. Most traffic from an ad is on a phone, and a hero that needs two-finger zoom is a failed page no matter how it looks on your monitor.
Five: title, description and share image exist
Not because the gate can judge whether they are good, but because an empty one is always wrong and is invisible until somebody pastes your link into a chat.
Six: the form posts to the inbox before any pixel fires
This is the one people are surprised by. If the pixel fires first and the inbox write fails, the ad platform learns about a lead you cannot contact. Storage first, then the fan-out. A lead that is counted but lost is worse than one that is neither.
Why the result is visible
We show the gate because a silent check is indistinguishable from no check. When it is green you know what was verified. When it is red it names the section and offers to fix that one, which costs six credits instead of redrawing a page for thirty-eight.