- adversarial-review-loop.md 45 lines · 2.6 KB
Adversarial-Review Loop
Loop Engineering — the verifier inside the loop is the hard part, and an agent grading its own homework will delete the failing test and call it done. This loop puts a second, different model in the reviewer seat: two model families must agree before code lands.
🎯 Goal
Implement a change, then have an independent cross-model reviewer argue against it. Iterate on findings until both the builder and the outside reviewer sign off — no self-grading.
⏱️ Schedule
Suggested interval: 15m (or run until the change is merge-ready).
▶️ Run it
/loop 15m "Implement the change. Then have a different model review it adversarially for correctness, security and design. Address every blocking finding and re-run tests. Land it only when both the builder and the independent reviewer agree there are no blocking findings. Max 5 review rounds."🔁 Iteration steps
- Build — implement the next slice.
- Cross-review — run
/gemini-reviewso a different model family critiques the diff. - Reason — collect blocking findings from the outside reviewer.
- Act — fix them;
architect-reviewvalidates the revision; re-run tests. - Observe — re-review with
/pr-review; loop until both sides agree (cap the rounds).
🛑 Stopping condition
Both reviewers report zero blocking findings and tests pass — or the review-round cap is reached and the loop hands off with the open findings.
💰 Budget & guardrails
A --max-iter style cap on review rounds and a severity threshold: only findings at/above the bar block. Two independent models must agree, so neither can rubber-stamp itself.
🧩 Referenced components
agent:expert-advisors/architect-review— the in-house reviewer.command:git-workflow/gemini-review— an independent, different-model review.command:git-workflow/pr-review— structured re-review checklist.
💡 Example
The builder ships an auth change; the cross-model reviewer flags a timing-attack risk the in-house reviewer missed. The loop fixes it, both agree, and only then does it land.
Scanned by NVIDIA SkillSpector
Automated static analysis (no LLM) · v2.12.0 · 2026-10-17
SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.
No observations.
Learn more about NVIDIA SkillSpector or how components are reviewed.