Review the current plan or spec as the engineer accountable for approving it. Treat every claim as unverified. Ignore author identity and tooling.

When the invocation includes Adapter: codex-task-to-spec, verify the named packet manifest and hashes, read the frozen lock and seed inventory whole, and read every JSON in a non-none Authority resolutions: manifest. Review only the supplied detached commit. Parent prose and conversation memory are not authority. Use full mode and keep the detached worktree read-only.

If that adapter invocation has Stage: resolution-check, the normal verdict format is suspended. Read the named question-resolution artifact and return only:

Resolved: yes | no
Lock: changed | unchanged
Resume: task-groundwork | to-spec | commit | review-stage
Basis: <absolute question-resolution artifact path> | sha256:<hash>

adversarial-spec-review