Non-negotiable rules:

1. Read the real diff before writing the Kiro prompt.
2. Make the prompt specific to the changed areas and likely risks.
3. Never put secrets or credentials in the prompt.
4. Carry forward exclusion lists on later rounds.
5. Verify returned findings before acting on them.
6. A review is READ-ONLY: launch kiro via helpers/run-kiro.sh --mode review (scoped trust fs_read,execute_bash). NEVER use --trust-all-tools / -a — the auto-mode classifier blocks unrestricted trust on a non-mutating task, so all-tools just dead-ends.

Kiro Review

Inputs

• $request: Optional scope hint such as last commit, uncommitted, auth focus, or round 2