review-perf

# Review Performance (internal) Composed by `review-change` / `product-audit` within their conversation — on any agent, follow this file inline as the routed step. **Findings only; never edits, never refactors.** ## Scope The diff or path/glob the caller passes; default the current change vs the default branch. State the scope at the top of the returned table. ## Checklist (evaluate EVERY item — none is optional; n/a must be stated) - ✓ No N+1 query/IO pattern on changed data-access paths (loop bodies issuing queries/requests — cite) - ✓ Algorithmic complexity of new code paths stated where input can grow (an unbounded O(n²) on user data is a major finding) - ✓ No blocking IO/sync work added on hot/request paths where the platform is async - ✓ Resources opened by the change are closed/released on ALL paths including errors (files, connections, subscriptions, timers) - ✓ No unbounded growth introduced (caches without eviction, arrays that only append, listeners never removed) - ✓ Web only: bundle/asset impact of the change stated (new dep size, image weight, lazy-loading where the project uses it) — n/a otherwise - ✓ Repeated computation hoisted where a loop recomputes an invariant (cite) - ✓ Pagination/limits on any new listing that reads user-scaled data - ✓ No premature optimization either: complexity added for speed without a cited measurement is a finding (the repo forbids overengineering) - ✓ **Measured evidence when declared** — the project's agent gu...