Security Differential Review

When to Use

• Reviewing pull requests or commits for security implications
• Assessing whether a code change introduces new vulnerabilities
• Comparing before/after states of security-sensitive code
• Evaluating dependency updates for security impact
• Reviewing infrastructure-as-code changes for security regressions

When NOT to Use

• Full codebase security audits (use audit-context-building first)
• Reviewing code without access to the diff
• Performance or feature reviews without security focus

Review Methodology