Review Loop

Review is a loop, not a single pass. When a round reports three or more findings tagged by severity, land the fixes, then spawn a new shard and have that agent audit the remediation itself, not the original work and not in parallel with it. It has to be a new shard: not the session that wrote the code, and not the one that found the problems. New findings start another round in another new shard. The work is complete when a round comes back under the threshold.