dual-review

Review a high-risk change with two models: the zyx reviewer agent (Claude) and a Codex adversarial review run in parallel, then sort every finding into four buckets where only Act on blocks the merge. Use when a change touches auth, secrets, migrations, deletes, the lab door, money, email, third-party writes, DNS or certificates, or when Loki or a project memory asks for a review. Triggers on 'dual review', 'review this', '送審', '審一下', '雙模型審', 'codex review', 'adversarial review', 'high-risk review'. NOT low-risk changes: they merge on green CI plus one real run.