ship-reviewlisted

# Ship Review (pre-PR gate) Inspired by the [addyosmani/agent-skills](https://github.com/addyosmani/agent-skills) `/ship` fan-out (MIT), re-mapped to this harness's pipeline and its own agents. A consolidated readiness review to run **before opening a PR**. It feeds human gate 3; it does not replace it. Every agent below ships with this harness in `.claude/agents/` and is read natively by **both** Cursor and Claude Code. This gate deliberately depends on **no** external review service — nothing here is metered, and nothing requires a subscription beyond the editor itself. ## When - After implementation + refactor are complete, before creating the PR - When the user says "ship", "ready to PR", "final review" ## Steps ### 1. Verify first (blocking) Run `/verify` (full pipeline), delegating the gate scripts to the **`gate-runner`** agent. If any critical phase FAILs, stop and fix — do not review broken code. ### 2. Parallel fan-out Dispatch all three in a **single message** so they run concurrently — they are independent, and running them in sequence wastes the main context on intermediate output. | Reviewer | Agent | Brief | |---|---|---| | Correctness & design | `code-reviewer` | Three-axis review of the diff — Risk, Standards, Spec | | Security | `security-reviewer` | `run-vulnerable-packages.ps1`, plus review for secrets/connection strings, injection, missing authorization, permissive CORS, PII in logs or telemetry attributes | | Coverage | `mutation-analyst` | Cover