GStack Review

Required execution header

Target: <concrete repository, product, URL, device, PR, or artifact>
Mode: <selected top-level mode>
Depth: <readiness, standard, or deep>
Mutation: <report-only or exact authorized mutation boundary>
Active modules: <comma-separated internal specialist modules>
Skipped modules: <comma-separated non-active mandatory modules with compact reasons>
Web context: <none, optional, local-browser, or production>

Dispatch protocol

1. Infer the mode from product stage, surface, requested artifact, mutation authorization, evidence needs, and deployment state. Do not route by keyword alone.
2. Refine the public mode to the smallest applicable internal specialist set, then print the required execution header before any substantive output.
3. Read each active module in full from the path shown in the mode/alias tables. Its specialist body, behavioral contract, STOP gates, and appended upstream judgment ports are binding. Read a lazy specialist phase in full only when the workflow reaches its package-local reference.
4. Read

   references/EXECUTION-PROFILES.md

   ,

   references/SHARED-JUDGMENT.md

   , and

   references/AUTHORITY-POLICY.md

   for every invocation. Read

   references/QUESTION-FORMAT.md

   before the first question to the user; it owns the decision-brief format, the structured-payload caps, and the prose fallback when no question tool is available. Infer Depth from structured operating conditions, then obey its mandatory modules, legal skips, artifacts, and claim limits. Read

   references/RUNTIME.md

   before capability-dependent work and

   references/WEB-CONTEXT.md

   before public-web work. When the target is a repository, read

   references/CODE-INTELLIGENCE.md

   once before substantive specialist work and follow its one-time indexing offer. Read

   references/THIRD-PARTY-ACTIONS.md

   before directing the user to act on a third-party website (API key registration, vendor accounts, dashboards).
5. If an old asset path is unavailable, use

   references/ASSETS.md

   . If legacy prose invokes another retired skill, resolve it through

   references/COMPATIBILITY.md

   and stay inside these five dispatchers.
6. Preserve report-only versus mutation boundaries. Missing mutation authorization fails closed: do not edit merely because a specialist can fix. Commits, pushes, PRs, merges, deploys, messages, and other external mutations still require affirmative authority from the user.
7. Match the user's language. Keep code identifiers, commands, and source quotations original when translation would reduce accuracy.
8. At exit, report completed artifacts, evidence, unresolved decisions, skipped modules with reasons, and any blocked gate.

Top-level modes

Normal

references/legacy/review.md

Security

references/legacy/cso.md

Performance

references/legacy/review.md

Deep

references/legacy/review.md

references/legacy/health.md

references/legacy/codex.md

references/legacy/claude.md

Hard rules

• Validate critical findings against current code and provenance.
• Trace loosened inputs into unchanged consumers and re-read unchanged user-facing strings.
• Never invoke the current model as its own outside voice.

Internal specialist routing aliases

/review

diff

Normal

references/legacy/review.md

/cso

security

Security

references/legacy/cso.md

/health

health

Deep

references/legacy/health.md

/codex

outside-codex

Deep

references/legacy/codex.md

/claude

outside-claude

Deep

references/legacy/claude.md

Completeness invariant