review-staged — file-aware review of the staged diff

One wave over the staged diff (git diff --staged), by reviewers that prove before they report.

Each reviewer has file access and carries its own burden of proof: it finds a candidate in the diff, opens the real file, checks the one assumption it rests on, and emits it only if it can cite a file:line proving the problem is real. Uncertain gets dropped silently. A diff-only guess can't tell a real null-deref from one a guard two lines up already handles — reading the file settles it before anything reaches the report, so no separate skeptic pass is needed.

Step 0  GROUND    load rules + manifest, filter the diff
Step 1  REVIEW    4 file-aware reviewers, each finds → verifies against real files → emits only proven findings
Step 2  MERGE     dedup + namespace + a light main-context cross-check of the P0/P1 evidence
Step 2.5 DESIGN   main context judges necessity / simpler path → advisory notes
Step 3  OUTPUT    verified findings only, each with its evidence
Step 4  APPLY     (opt-in) edit confirmed P0/P1 only when the user asks

Output INLINE — no plan mode, no clarifying questions. Read-only by default; writing files happens only in the opt-in Step 4 when the user explicitly asks to apply fixes.

Step 0 — Ground