MCAF: Human Review Planning
Read root/local AGENTS.md and the requested area. Keep this pass read-only unless the user requests a saved plan or implementation.
Workflow
- Trace the actual user or system lifecycle from entry points through validation, permissions, persistence, integrations, side effects, and completion. Include immediate callers and contracts needed to understand it.
- Compare new behavior with established architecture, analogous entities, and existing invariants. Prioritize state corruption, authorization bypass, irreversible effects, retry/idempotency mistakes, and integration drift.
- Produce two separate lists: the ordered review flow, and priority files/modules. For each item, name the concrete risk and what the reviewer should verify.
- Distinguish inspected evidence from assumptions and unexamined paths. A priority plan is not proof that the code has no defects.
- Present both lists in chat. Save only when requested, at the user's exact path or the nearest relevant
docs/area.
Do not invent a universal signup/create/update sequence; follow the actual system. Do not replace human prioritization with a generic checklist or claim completed verification.
References
- For output fields and save location: review plan format.
- When ranking boundaries: risk signals.