What problem does it solve? Work can pass its tests and still be unsound: it may expand scope, alter protected behavior, introduce unjustified dependencies, leak private data, or weaken recovery. This Skill provides a structured review contract that inspects the actual change surface against the approved intent and governing constraints before acceptance. ## Core Features & Use Cases - Scope and Protected-State Review: Classifies changes as in-scope, justified, unresolved expansion, or out-of-scope, and detects unauthorized modifications to protected files, APIs, or behavior. - Architecture, Dependency, and Security Hazard Checks: Flags contract drift, unjustified dependencies, exposed secrets, unsafe permissions, and recovery gaps with severity-ranked findings (BLOCKER, MAJOR, MINOR, NOTE). - Bounded Review Decisions: Returns PASS, PASS WITH NOTES, CHANGES REQUIRED, BLOCKED, or STOP with evidence and the smallest recommended correction path. - Use Case: Before merging a pull request that adds a new exporter, run a review to confirm the change stayed within the approved plan, did not rewrite a protected CSV engine, introduced no unvetted dependencies, and that PR claims match what was actually tested. ## Quick Start Review the changes in this pull request against the approved plan and report any scope, protected-state, dependency, security, or recovery findings with a final review decision.
