Wiring a new infrastructure source into a security policy engine used to mean writing a custom extractor. We replaced it with a YAML contract per asset type and a single command that emits everything an agent needs to author one. Five iterations, one new CLI command, zero per-customer integration work.