What problem does it solve? Governance changes require independent, tamper-proof review, but reviews often run in the same context as the author, lack complete evidence, or silently mutate the worktree. This Skill enforces a read-only, isolated review process that blocks certification when evidence, identity, or isolation requirements are unmet. ## Core Features & Use Cases - Isolated read-only review: Executes reviews in a separate context with an immutable snapshot or denied write tools, fingerprinting the worktree before and after to detect drift. - Independent reviewer enforcement: Resolves the highest-certified independent review policy, requiring the reviewer provider to differ from the author provider. - Evidence-gated outcomes: Every canonical review question must be answered with evidence; missing identity, incomplete coverage, or unavailable transport results in REVIEW-BLOCKED rather than PASS. - Use Case: A design-system governance change authored by the codex provider needs tier-0 certification. This Skill binds the review to an independent peer provider, verifies the worktree is unchanged, and blocks the review if any canonical evidence is missing. ## Quick Start Ask the AI to run the canonical-reviewer binding to independently review the pending governance change with full canonical evidence and read-only isolation.
