CategorysafetyManual5.2Evidencedocumented
ProblemAuto Review reads like a deterministic gate and is not one.
TechniqueTreat it as a complement to least privilege and explicit boundaries, never a replacement. Expect allow-listed actions to stop anyway when the review finds an independent reason, and treat that as designed behaviour.
Why it worksThe reviewer is itself a model, so its coverage is probabilistic.
When to useWhenever you are tempted to rely on Auto Review alone.