Always require structured independent security reviews

For sensitive workflow and release-automation changes, request a fresh, independent, read-only review of the exact current worktree before merge or handoff. Require reviewers to inspect current source lines and relevant tests across all approval, provenance, CI handoff, revocation, credential, pinning, and untrusted-context paths. Prohibit edits during review. Demand substantive findings ordered by severity using exact labels (MUST-FIX, CONCERN, PASS) with file:line citations, a compact test/evidence section, and a final unambiguous MERGE or DO-NOT-MERGE verdict. If inspection cannot be performed, require an explicit BLOCKED error and DO-NOT-MERGE.