Audit Only

Investigate and report. Do not edit code, create files, or open PRs until the user explicitly says to proceed.

Do

1. Read the relevant code/data and answer the actual question first.
2. Report findings: what's there, what's wrong, options + a recommendation.
3. If a change is warranted, describe it and wait for a go.
4. If asked, post findings as a PR/issue comment — that's still not code edits.

Don't

• Start writing code because the fix seems obvious.
• Act on assumed scope — answer what was asked, nothing more.
• Treat "review this" or a plain question as permission to change things.