v0.4 to v0.5

18 added, 18 removed. Audit A to A.

---

name: fresh-eyes-review

description: Fresh-eyes review of a changeset by a fresh-context agent — catches regressions and correctness issues the authoring context reads past.

disable-model-invocation: true

type: flow

license: MIT

metadata:

- version: "0.4"

+ version: "0.5"

---

# Fresh-eyes review

A context that produced a change reads its intent, not its text, so same-context review misses what

a fresh reader would catch. The fix is procedural: a reviewer whose context holds only the

artifacts.

## Workflow

1. **Resolve the inputs.** The changeset: whatever the invocation names — a branch, a commit, a

diff range, a draft vs its original. Given none, infer it from the session — usually the work

just finished, committed or not; no VCS required. With no session context to draw on, fall back

to the current git diff; when that too yields nothing, ask the user what to review. Pin the

changeset as concretely as the environment allows — a diff or commit range where one exists,

otherwise the touched files, with their prior state when reconstructable. Alongside it, a short

statement of what the change is supposed to achieve, when one exists (the task as stated, a PR

or ticket description); when this session authored the change, never include the session's own

reasoning, plan, or messages — leaked rationale recreates the blindness the fresh context

exists to remove. Done when changeset and intent are pinned down and free of authoring context.

- 2. **Confirm the prompt.** Assemble the reviewer prompt — changeset, intent, and the mandate and

- exclusions below. When the invocation supplied changeset, intent, and mandate explicitly (e.g.

- a driving skill), nothing was inferred, so skip the confirmation and proceed. Otherwise show

+ 2. **Confirm the prompt.** Assemble the reviewer prompt — changeset, intent, the mandate and

+ exclusions below, and any further reviewer instructions the invocation supplies (e.g. what to

+ report back). When the invocation supplied changeset, intent, and mandate explicitly (e.g. a

+ driving skill), nothing was inferred, so skip the confirmation and proceed. Otherwise show

the prompt to the user verbatim and wait for approval; fold any doubt about an inferred

changeset into the proposal rather than asking separately. Text emitted before a tool call may

not be displayed, so never show the prompt and then ask via a question tool in the same turn —

end the turn with the prompt and a plain-text ask, or embed the prompt in the question tool.

Done when the user has approved the prompt, as shown or amended — or the explicit-inputs skip

applied.

3. **Spawn one fresh-context reviewer** (a subagent or equivalent isolated session) with the

prompt, free to read any surrounding project material — except the paths the prompt lists as

excluded: any exclusions the invocation supplies, plus, when this session authored the change,

session-authored files that are not part of it (plans, notes, scratch), since a fresh context

- cannot tell them apart. Its mandate,

- unless the invocation redirects it (e.g. security only): regressions and correctness, including

- contradictions with surrounding code, rules, or docs; ambiguities a reader without context

- would trip on; and, when an intent statement was given, whether the change does what it says.

- Tough but grounded, aimed at mistakes that matter: every finding names its location and a

- concrete failure scenario; style nits, speculation, and padding are out of scope, and zero

- findings is a valid outcome. If the harness cannot isolate a context, fall back to an

- adversarial pass over the same inputs in the main session. Done when an isolated reviewer has

- returned its findings, or the fallback pass ran and its result is flagged as same-context

- (weaker).

- 4. **Report back.** Relay every finding intact — location and failure scenario included; add the

- session's own assessment when useful, but never silently drop or soften a finding. What to do

- with the findings is the caller's decision, not this skill's. Done when every reviewer finding

- appears in the report.

+ cannot tell them apart. Its mandate, unless the invocation redirects it (e.g. security only):

+ regressions and correctness, including contradictions with surrounding code, rules, or docs;

+ ambiguities a reader without context would trip on; and, when an intent statement was given,

+ whether the change does what it says. Tough but grounded, aimed at mistakes that matter: every

+ finding names its location and a concrete failure scenario; style nits, speculation, and

+ padding are out of scope, and zero findings is a valid outcome. If the harness cannot isolate

+ a context, fall back to an adversarial pass over the same inputs in the main session. Done

+ when an isolated reviewer has returned its findings, or the fallback pass ran and its result

+ is flagged as same-context (weaker).

+ 4. **Report back.** Relay every finding intact — location and failure scenario included — plus

+ whatever else the reviewer was instructed to return; add the session's own assessment when

+ useful, but never silently drop or soften a finding. What to do with the findings is the

+ caller's decision, not this skill's. Done when every reviewer finding appears in the report.