receiving-code-review git:20260308.cb7adb9A

Immutable. This exact content is served forever at /api/v1/blob/08e7650309080a5d.

---
name: receiving-code-review
description: >
  MUST USE when handling review feedback to verify suggestions, resolve
  unclear items, and implement changes with technical rigor. Triggers on:
  review comments received, "address review feedback", "fix review comments",
  PR review responses.
---

# Receiving Code Review

Treat feedback as technical input to validate, not as instructions to apply blindly.

## Sequence

1. Read all feedback.
2. Clarify unclear items before implementing anything.
3. Validate each suggestion against codebase behavior and requirements.
4. Implement fixes in priority order.
5. Re-test and summarize outcomes.

## Priority

1. Correctness/security regressions
2. Requirement mismatches
3. Maintainability issues
4. Minor polish

When a `security-reviewer` report is available, treat its Critical and High findings as blocking until addressed or explicitly deferred by the user with documented rationale.

## Pushback Rules

Push back when a suggestion:
- Breaks behavior
- Conflicts with approved architecture
- Adds unused scope (YAGNI)
- Lacks enough context to verify

Pushback must include concrete technical evidence.

## Response Style

- Be factual and concise.
- Avoid performative agreement.
- State what changed, where, and why.

## Completion

Report:
- Addressed items
- Deferred items with reason
- Verification commands/results
- Remaining risks