Use provider-native review and generic subagents for the repository's standards and spec-fidelity lenses, plus ordinary self-review. Use this skill only for a guarded or critical change, or when the user explicitly asks for a portable review record. Add one provider-native security lens when the change touches trust boundaries, authorization, secrets, cryptography, money, or untrusted input. This skill adds only the shared receipt contract and does not assume a separate security skill is installed.

Choose the review level

Use the smallest level that fits the change:

Level	Use when	Evidence
`docs`	Only documentation or research files changed	Focused diff and any relevant link or snippet check; no receipt
`routine`	Bounded code change with no guarded or critical trigger	Focused checks and native self-review; no receipt
`guarded`	Public contracts, migrations, dependencies, build or release configuration, or a broad change	One fresh-context review and one receipt
`critical`	Authorization, secrets, cryptography, money, destructive data work, or untrusted input	One fresh-context review plus one external security lens and one receipt

spine-review

Choose the review level