Review. Run
on the changed code. If the change touches auth, payments, user input, or data access, also run
. Fix all findings in scope — bugs, security issues, edge cases, performance, style in files you touched. If the project has a design system spec (design tokens file, DESIGN.md, theme config), check UI changes against it — no hardcoded colors, type, or spacing that bypass tokens. Note pre-existing issues in untouched code for the report instead of fixing silently. Re-run
until clean. If a finding contradicts the task or spec, the spec wins — flag the disagreement.