code-review-and-review-army

name	code-review-and-review-army
description	Use when the task involves code review, PR review, implementation audit, specialist review passes, review-army dispatch, security/performance/testing/API/data/migration/maintainability review, scope-drift detection, and APIVR Phase 4 Audit Implementation before verification or release.
activation	Activate when the description trigger applies to the current task.
required_inputs	Task request, relevant repository context, constraints, and authority dependencies.
required_outputs	Skill-specific artifact, verification evidence, canonical verdict, and next action.
authority_dependencies	00_start_here/SOURCE_OF_TRUTH.md; 10_governance/APIVR_EXECUTION_LIFECYCLE.md; 10_governance/source_of_truth/Elite_Build_Goals_v3.md.
evidence_requirements	Executed checks or an honest Unknown, Not Run, or Blocked state for every material claim.

Code Review And Review Army

Use this skill during APIVR Phase 4 after implementation and before final verification claims.

Mandatory concise challenger pass

For installer, security, runtime-adapter, evaluator, or release changes, one reviewer independent of the implementer must review the exact base-to-head diff before a release claim. The pass must check false support claims, tests that cannot fail, missing Red evidence, unsafe residue handling, evaluator self-approval, pin drift, rollback gaps, duplicated authority, unnecessary complexity, and skipped verification. Material findings require repair and a re-review of the same scope; a fix attempt alone does not clear the finding.

Specialist Passes

Select only relevant reviewers:

• Spec Compliance Reviewer: checks scope, acceptance criteria, and preserved behavior.
• Security Reviewer: auth, permissions, secrets, input/output, abuse, and data exposure.
• API Contract Reviewer: request/response compatibility, versioning, webhooks, retries, and idempotency.
• Data/Migration Reviewer: writes, backfills, transactions, reversibility, and reconciliation.
• Testing Reviewer: Red-Green-Refactor evidence, weak assertions, skipped tests, and false confidence.
• Performance/Cost Reviewer: hot paths, query shape, caching, payload size, and unbounded work.
• Maintainability Reviewer: module boundaries, naming, deletion test, and local patterns.
• UX/QA Reviewer: user flow, accessibility, responsive behavior, and adverse states.
• External Integration Gatekeeper: provider-facing route contracts, deployed provider delivery, deployment protection, middleware redirects, sandbox/live split, and machine-caller auth boundaries.
• 20 Pass Reviewer: high-stakes source files, prompts, agents, skills, plans, runbooks, release instructions, and final reports have gone through the 20 Pass Protocol or have a justified compressed pass.
• Learning Reviewer: checks whether findings reveal a reusable lesson, stale guidance, or duplicate source of truth that should route to compound learning or knowledge refresh after verification.

Review Flow

flowchart TD
  A["Implementation complete"] --> B["Check scope drift"]
  B --> C["Run selected specialist passes"]
  C --> D{"Any Blocking finding?"}
  D -- "Yes" --> E["Return to APIVR Phase 2 or 3"]
  D -- "No" --> F{"Any Important finding?"}
  F -- "Yes" --> G["Fix or record owner/risk acceptance"]
  F -- "No" --> H["Check reusable learning"]
  G --> H
  H --> I["Proceed to Phase 5 verification"]

Finding Format

Reviewer:
Finding:
Severity: Blocking / Important / Advisory
Evidence:
Affected file or behavior:
Required action:
Release gate impact:
Reusable learning impact: