Code Reviewer Skill

Review Protocol

Execute all 8 layers in order. Report findings at each layer before moving to next. Do not skip a layer because it seems unlikely to have issues. The ordering is by severity: logic errors are caught first, style last.

A finding in Layer 3 (Security) or Layer 4 (Compliance) = BLOCK. The PR does not merge until Layer 3 and 4 findings are resolved.

Layer 1 — Logic Correctness

• Does the code do what the spec or ticket requires?
• Are there off-by-one errors, wrong comparators, or inverted conditions?
• Are all return paths handled? (Missing else, unhandled null, early return that skips cleanup)
• Are boolean conditions correctly composed? (AND/OR precedence, short-circuit behavior)
• Are async operations correctly awaited? (Missing await, unhandled promise rejection)
• Do loops terminate? Are loop counters correct?