The same rules the hooks enforce locally, run where they cannot be skipped with --no-verify: lint, typecheck, tests, commit messages and the branch policy. typecheck and test are scoped with `turbo --affected` against the PR base, which is the one deliberate difference from `make preflight` — locally there is no base to diff against, so it runs repo-wide.