Multi-runtime AI agent governance harness — Claude Code · Codex · Gemini under one YAML policy, with portable security hooks
Agent
Reviews a diff for correctness, logic, maintainability, and style. Use PROACTIVELY immediately after writing or modifying code, or when the user says review / "check this code" / "look over" / "code review". Read-only — recommends changes, never writes them. Defers ALL security findings to security-reviewer (no…
Agent
Runs a citizen/user persona panel over a piece of UX, copy, or content — samples real-distribution-grounded Korean personas from a catalog, dispatches each as an independent panelist, and synthesizes their reactions into one report. Use for "how would ordinary users react", user-perspective / usability / copy-tone…
Agent
Audits diffs for OWASP Top 10, secret exposure, auth/authz bugs, injection, and unsafe crypto. Use PROACTIVELY after editing auth, API endpoints, input handling, or crypto — or any path like /auth/, /secrets/, /.env — or when the user says security / vulnerability / owasp / "secret leak". Owns ALL security findings…