review-passeslisted

# git-gremlin — review passes Reusable review pass contract for `git-gremlin:review`. The caller owns orchestration. Review workers are read-only scouts: they return candidate findings, not the final report. The caller must deduplicate, substantiate, severity-rank, and validate the final findings before showing them to the user. ## Shared input Every pass receives the same compact packet: ```text REVIEW_CONTEXT: <output of scripts/review-context.mjs> DIFF_COMMAND: <manifest Diff command> APPLIED_RULES: <loaded instruction sources marked applies, summarized when large> PR_OR_SPEC_CONTEXT: <PR title/body/base/Linear/spec context if available, otherwise "none"> USER_SCOPE: <explicit user focus such as staged-only, security, file path, or "full review"> ``` The pass may run the `DIFF_COMMAND`, inspect changed files, and read surrounding code needed to prove or dismiss a candidate. It must not mutate files, git state, external services, or PR comments. ## Candidate output Return candidate findings as JSON-like data or concise structured markdown: ```json { "findings": [ { "severity": "BLOCKER | HIGH | MEDIUM | LOW | NIT | INFO", "title": "short claim", "file": "path/to/file.ts", "line": 123, "evidence": "diff/source/rule evidence that proves the issue", "impact": "concrete failure mode or review risk", "rule": "optional instruction source", "fix": "minimal direction", "confidence": "real | uncertain" }