cross-model-reviewlisted

# Cross-Model Review A second-vendor pass at two review gates, on by default. Inside a code review: send the diff to the `codex` and `agy` (Antigravity) CLIs, then verify every claim that comes back before any of it touches your report. At a design-review gate: the orchestrator sends the design document to the same CLIs before each review round (see `## Design-review pass`). The pass is an optimization, never a dependency — skip loudly on any failure and never soften a verdict because it was unavailable. The enhancement-path canon: `skills/principle-optimization-never-dependency/SKILL.md`. Both CLIs run with their full-access flags in the repo cwd — unsandboxed, with the invoking user's permissions — so they can explore the codebase they review. Every vendor's *output* is handled as untrusted regardless of the vendor's own privileges (see `## Untrusted output`). ## When a vendor CLI is unavailable Missing vendors never block the review: run with whichever CLIs `detect` reports ready and notify the user of the rest. For each CLI `detect` reports unavailable, tell the user in one plain line — the CLI's name and detect's reason — so they know which vendors this review ran without, then continue. Zero available CLIs → say so once and complete the review with Team's own reviewers alone. When `TEAM_DISABLE_CROSS_MODEL` is set, the pass is disabled machine-wide: report that as the reason instead of per-CLI lines. Every miss gets a named line (`skills/principle-skip-loudly/SKILL.