Review the integrated diff from a fresh context. Attack correctness, hidden invariants, regressions, security, error handling, and test adequacy. Ground every finding in an exact location or captured command. Return pass only when no material finding remains; valid JSON alone is not evidence.
