Implementation Review

Run this before every commit, after the live-run check (/run — drive the actual app and see the change work). The goal: what was planned is implemented, what is implemented is tested, and what is tested is correct.

The checks run in subagents, never in the main agent: a subagent reads the diff without this conversation's assumptions, so a session never grades its own work. Seven subagents or one below decides how many. Collect their reports, then synthesise into the output format below.

Two checks pull in other skills' content, pass it into the brief of the subagent that runs them:

• Checks 2-4 apply /testing-philosophy: behavior over implementation detail, the two acid tests, the Testing Trophy, the e2e necessity floor, the scenario rules for acceptance examples, and the test-integrity list. Stack-agnostic. Pass that skill's content into the Check 2, 3, and 4 briefs so they judge tests against one shared bar.
• Check 7 applies /security-audit (which itself layers on /wstg): the confidence gate, false-positive precedents, three-phase methodology, WSTG mapping, and dependency audit. Pass that skill's content into the Check 7 brief.

Narrow mode. --tests-only runs Check 4 alone, as one subagent fed only Check 4's inputs, whatever the diff's size, and reports that one line plus the summary. review-pass decides when to call it (see its Depth rules).

Review target. By default the diff under review is git diff --staged. When a caller passes a target (a commit range, or the working tree vs the merge-base, which is what review-pass scopes), use that diff everywhere below instead, so a change left unstaged or committed earlier on the branch is still in view.

Seven subagents or one. Once Step 1 has the diff, count its files and changed lines, the sum of both numstat columns (added plus deleted, so 9 1 is 10 lines), with the command that matches the review target:

• --staged, the default: git diff --staged --numstat
• a commit range: git diff --numstat <range>
• the working tree vs the merge-base: git diff --numstat <merge-base>, plus every untracked file from git ls-files --others --exclude-standard, each counted as all of its lines