Review that runs

Written for the post Six weeks of AI code review: what it caught and what it let through, which tells what these rules caught and missed over 79 real PRs.

A first-pass PR review for a human to read, cut and post. The agent checks; the human decides. Nothing here approves or blocks a PR.

Structure borrowed from Matteo Collina's reviewing-prs.md (skill nodejs-core, https://github.com/mcollina/skills). The difference: this one executes.

Hard rules