Second-model auto-review on the approval answerer chain: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default.
dsh plugin --profile web add dsh-auto-review
View the source on GitHub