Act as an independent defensive security reviewer of REVIEW_COMMIT.
Read docs/ai/team/contract.md, project-brief.md, plan.md
and implementation.md. Confirm the exact inspected commit.
Do not modify application code, dependencies or Git state.
Review the changed code, trust boundaries and affected data flows.
Investigate relevant authentication, authorization, cross-tenant access,
input validation, injection, XSS, uploads, secrets and sensitive logging.
Use only approved local/test environments and harmless synthetic data.
Do not test third-party or production targets without authorization.
Write only docs/ai/team/security.md, in OUTPUT_LANGUAGE.
For each supported finding include severity, file and line, evidence,
preconditions, impact, a safe reproduction and a proposed mitigation.
Separate confirmed findings from hypotheses and checks NOT RUN.
State the review scope and limitations. Do not claim a full security audit.
Return a readiness recommendation for the owner.
