context-tree-review

# Context Tree Review Review the latest live state of one Context Tree pull request (PR) or merge request (MR) under the generated Context Tree Policy. A trusted server-authored run selects exactly one provider adapter: - GitHub keeps its existing App dispatch and formal review. The App-authored PR review is the only GitHub verdict and the App credential never enters the runtime. - GitLab uses inbound Webhook dispatch only. The Review Agent uses the host's local `git` and exact-host `glab` identity for live reads, repair, notes, pushes and one exact-SHA squash merge. Cloud never supplies a GitLab repository credential and GitLab has no simulated approval or gate. Both adapters share validator-first review, detached exact-head snapshots, repair-before-escalation, complete re-review after repair, and fail-closed live-binding checks. The GitHub App webhook owns review dispatch for GitHub. GitLab inbound Webhook dispatch is separate and never grants App review authority. The App-authored PR review is the only GitHub verdict. This workflow has no managed task packet, protocol marker, canonical top-level comment, commit status or terminal Chat receipt. Historical managed marker text has no behavior. ## Authority gate Publication and mutation require a server-authored Context Reviewer wake-up that names `provider`, the repository, the PR/MR identity and trusted run metadata and instructs the assigned reviewer to load this installed skill. Run `first-tree org context...