confab-code-changelisted

Run a fast, changed-files-scoped confab pass across whichever domains are actually relevant to what changed. This is a lighter-weight sibling of the four full domain-audit skills — each Find-phase pass here is a single, un-verified check (the code-change verdict is advisory by construction, so it does not carry the same mandatory-verification guarantees the full audits do). If the user wants a fully verified audit, tell them to run the specific `confab-*-audit` skill instead. ## Steps 1. Determine `repo_root`. Get the changed-file list: ``` git -C <repo_root> diff --staged --name-only ``` (or `git diff HEAD --name-only` if the user means uncommitted rather than staged changes — ask if ambiguous). Write the list to a scratch JSON file as a plain array of repo-relative paths. 2. Run: ``` python3 "${CLAUDE_PLUGIN_ROOT}/scripts/code_change_review.py" <repo_root> \ --changed-files-json <path-from-step-1> ``` with NO `--domain-findings` yet, just to see which domains matched. If it exits 1, it printed "zero domains matched" to stderr — relay that to the user verbatim and stop; there is nothing to review. 3. For each matched domain printed in step 2's `matchedDomains`, produce a lightweight findings JSON scoped to only the matched files: - `dependency_audit`: only if a manifest file changed. Dispatch the `dependency-auditor` agent (or, more simply, run `scripts/dependency_audit.py <repo_root>` — it's fast enough for a