code-reviewlisted
Install: claude install-skill comment-hq/skills
# code-review — one official review for the exact PR head
This is the posted official review path. It is distinct from `review-loop`,
which certifies bounded in-flight deltas. Do not run both local Codex review and
this skill for the same candidate.
## Eligibility
Read the PR's state, base, exact head SHA, changed files, relevant
`AGENTS.md`/`CLAUDE.md`, and prior reviews. Stop for a closed/draft PR unless
`ship` deliberately opened a draft because this is the only available official
reviewer. Do not skip merely because an earlier head was reviewed: official
evidence must match the current head.
## Risk-scaled review
Use one strong primary reviewer for correctness, regressions, missed
requirements, and repository-instruction violations. Add one independent
specialist lens only when the diff touches authorization/security,
migrations/storage, protocol/compatibility, concurrency, native code,
destructive behavior, or credible data-loss risk. Three reviewers are reserved
for exceptional blast radius.
Lock the review to the PR's declared subject, acceptance criteria, invariants,
and exact base/head delta. Read only the surrounding code and history needed to
verify impact; untouched context is evidence, not a broader audit surface. A
finding is in scope only if the PR delta introduced or changed it, or the delta
makes an existing path violate an explicit requirement/invariant. For a lift promotion, consume the review
receipt ledger and focus on receipt coverage, cross-slice