Audit

Audit

Standalone multi-level code review. Dispatcher — Opus 4.7 (thinking-tier). Workers — Sonnet 4.6.

Inputs

• Target — file path, line range, commit SHA, branch, or PR number provided by the user
• Default (no target) — git diff HEAD + git diff --staged
• Level flag — --level 1 through --level 5 (default — L2)

Review Levels

Adapted from review-levels.md:

Security scan (hardcoded secrets, injection, path traversal, XSS, missing validation) is mandatory at L3+. See security.md.

Flow

1. Resolve scope — use provided target or run git diff HEAD + git diff --staged.
2. Dispatch Searcher — gathering context for review (Sonnet 4.6) to map referenced files and load relevant project context.
3. Dispatch **Reviewer** — reviewing <scope> at level L<n> — Opus 4.7 (thinking-tier, non-negotiable).
4. Reviewer uses reviewer-prompt.md template with the diff, level definition, and any applicable spec.
5. Aggregate findings into structured output (see below).
6. Append durable patterns/gotchas to .hyperflow/memory/learnings.md per memory-system.md.

If any security issue found → emit SECURITY_VIOLATION: halt marker immediately.

Output Format

── Review Result ──────────────────────
Scope: <files / range / commit>
Level: L<n>
Verdict: PASS | NEEDS_FIX | SECURITY_VIOLATION

[Critical]
- file:line — issue + required fix

[Important]
- file:line — issue + recommended fix

[Suggestions]
- file:line — optional improvement

[Praise]
- file:line — what's done well
───────────────────────────────────────
Agents: 1 searcher (sonnet) · 1 reviewer (opus)

Hand-off (no auto-chain)

• PASS — suggest /hyperflow:deploy if the user is ready to release. Do not auto-ship.
• NEEDS_FIX — print the finding list and suggest /hyperflow:trace (for root-cause bugs) or manual edits. Do not auto-fix.
• SECURITY_VIOLATION — halt; do not transition. User decides remediation path.

Doctrine

Full rules in DOCTRINE.md. Output style in output-style.md.