review-contractlisted

# compass:review-contract (Review-1 · LIGHT) Lens: **is the WHAT airtight?** One focused pass; loop only if gaps. ## Step 0 — gate (real, not prose) Run `compass.sh gate .claude/builds/<slug> contract` (slug from `.claude/builds/CURRENT`). **Non-zero exit → STOP**, offer `compass:contract`. Read `contract.md`. Set `progress.md` status = `in-review (R1)`. ## Engine - **Ledger:** create `.claude/builds/<slug>/review-ledger.md` if absent. Append-only rows, `Status` in place. Columns: `Issue ID | Review (R1/R2/R3) | Round # | Affected area | Failure mode | Impacted invariant | Severity | Root cause | Fix | Validation | Owner stream | Status`. - **Material** = new Critical/Major. **Converged = ONE clean pass** (zero new material). Cap **2**. Footer per round: `> Round N (R1): new Crit/Maj=0. Clean? yes`. - Proof here = **grounding** (checked against real schema/data, or flagged as an owned risk — a flag is not a pass). **Agent agreement is not evidence.** - Cap without convergence → **no level above the contract → STOP, hand to the USER** with the open questions. ## Streams (one pass) 1. **Completeness** for the chosen facets — every required section substantive (incl. scale, deps, reconciliation, idempotency, rollback, observability; web: auth + tokens + a11y; pipeline: input-contract + determinism + output-schema + reproducibility). 2. **Ambiguity** — every term defined; name any phrase readable two ways. 3. **Testability** — every requirement measurable. **A deferred flag