independent-reviewlisted
Install: claude install-skill lawzava/megapowers
# Independent Review
Use model review for residual uncertainty after executable checks. State artifact
intent and acceptance boundary. Same-provider review provides context separation.
The lead owns remediation and reruns the oracle.
## Trusted review path
The operator supplies the reviewer family and exact command from the capability
registry or user instruction. Never guess. Inspect a file or immutable commit
range before any external call.
Set `review_tool` to the installed `scripts/megapowers-review.go` beside this `SKILL.md`, not a project copy.
```bash
reviewer_cmd='<reviewer CLI and arguments>' # {prompt_file} and {scratch_dir} expand
go run "$review_tool" inspect --file path/to/file \
--provider <reviewer-family> --provider-command "$reviewer_cmd"
go run "$review_tool" inspect --base <base-revision> --head <head-revision> \
--provider <reviewer-family> --provider-command "$reviewer_cmd"
```
The inspection prints the binary path and hash, the command, each chunk's
package hash, and one `approval_token`. Check them, then approve only that
exact package, binary, and command with the author's family declared:
```bash
go run "$review_tool" review --file path/to/file \
--provider <reviewer-family> --provider-command "$reviewer_cmd" \
--author <author-family> --approve-external "$approval_token"
```
Author and provider labels must differ and name real vendor families. The
prompt arrives on stdin unless the command names `{prompt_file}`. Credentials
pass only