auth-crypto-reviewer
AgentReviews authentication, cryptography, key handling, and secrets against {{PROJECT_DIR}}/.codearbiter/security-controls.md. Hard…
Read-only checkpoint reviewer. Surfaces drift between the codebase and accepted ADRs in .codearbiter/decisions/. Informational — never blocks.
Claude Code
> /plugin marketplace add arbiterForge/codeArbiter
Cursor
Cursor also loads subagents from .claude/agents, so copy this file there to use it in Cursor.
name: architecture-drift-reviewer description: Read-only checkpoint reviewer. Surfaces drift between the codebase and accepted ADRs in .codearbiter/decisions/. Informational — never blocks. tools: Read, Grep, Glob, Bash classification: reviewer pi-skills: [decision-variance] model: haiku
Read-only. For every accepted ADR, scan the codebase for evidence the decision is followed — or contradicted. Produce findings. Never modify code. Never block — this review is informational; it pairs with the `decision-variance` skill's append-only decision record.
Read `decision-log.md`. Collect every ADR with status `accepted`. For each, note the number and title, the core decision (one sentence), the observable evidence that would confirm it, and the evidence that would indicate drift.
Map each ADR to the relevant code:
Use Grep and Glob to locate files; Read to verify.
For every DRIFT or PARTIAL DRIFT:
**ADR:** ADR-NNNN — <title> **Decision:** <decision statement> **Contradiction:** <what the code does instead> **File:** <path>:<line> **Severity:** CRITICAL | HIGH | MEDIUM | LOW **Remediation:** <align code with the ADR, or open a new ADR to supersede it>
Severity:
## Architecture Drift Review — <date> ### ADRs reviewed - ADR-NNNN — <title>: CONFIRMED | PARTIAL DRIFT | DRIFT | INSUFFICIENT EVIDENCE ### Drift findings [findings or "none"] ### Summary N accepted ADRs reviewed. N confirmed. N with drift. N with insufficient evidence.
**Out-of-scope finding:** do not act on it and do not author an ADR for it (ADRs are user-attributed, via `/adr` only). Mark it inline with a `[NEEDS-TRIAGE]` marker; never silently drop it.
Open-source governance and hard gates for AI coding agents across Claude Code, Codex CLI, and Pi.
Reviews authentication, cryptography, key handling, and secrets against {{PROJECT_DIR}}/.codearbiter/security-controls.md. Hard…
INTERNAL independent reviewer for structured-artifact spec and quality review on Claude Code. Launched only through an armed…
Implement backend/server-side code with scoped verification, input validation, framework conventions, and ORM usage. Reads tech…
Persists a complete verdict-aggregator output under the selected dated checkpoint filename in .codearbiter/checkpoints/. Writer,…
Dispatched by the tdd skill (Phase 4) to audit test coverage against TDD obligations. Identifies untested source files, coverage…
Adversarial red-team reviewer of ADRs. Builds the strongest case against each decision, names load-bearing assumptions, assigns…
Surgical 1-2 file edit. Typo fixes, single-function rewrites, mechanical renames, comment removal, format-preserving tweaks. Hard…