Within an iteration, we track defects with failing automated tests - a feature isn't "done" until it is passing all automated tests and manual testing.

Outside of an iteration, we track bugs the same way we track feature requests - with index cards.

We're aiming to get to the state described here: