What problem does it solve? Code changes often get committed without independent verification, letting security flaws, logic errors, and regressions slip through because the same agent that wrote the code also reviews it. ## Core Features & Use Cases - Static Security Scanning: Greps added diff lines for hardcoded secrets, shell injection, eval/exec, unsafe pickle deserialization, and SQL string formatting. - Baseline-Aware Quality Gates: Runs pytest, npm test, cargo test, or go test plus linters (ruff, mypy, eslint, clippy, go vet) and only blocks on NEW failures versus the pre-change baseline. - Independent Reviewer Subagent: Dispatches a fresh-context reviewer via delegate_task that returns a fail-closed JSON verdict on security concerns and logic errors. - Auto-Fix Loop: Spawns a separate fix agent for up to 2 fix-and-reverify cycles before escalating to the user, then commits with a [verified] prefix. - Use Case: After implementing a feature touching multiple files, run this pipeline before git push to catch a leaked API key and a missing error handler that self-review would have missed. ## Quick Start Ask the agent to verify and review my staged changes before committing them.
