# Shared Review Checklist

> Cross-platform review gate for Kingdee code, script, and contract changes.

---

## P0 Blockers

- [ ] Product family is ambiguous or contradicted by project profile/skills/code evidence.
- [ ] Metadata identifiers are guessed instead of verified.
- [ ] Data-changing script lacks impact query, backup, verification, or rollback.
- [ ] Transaction code can silently continue after a consistency failure.
- [ ] Raw SQL/KSQL concatenates user or request input.
- [ ] User-facing errors expose stack traces, SQL, secrets, or internal payloads.
- [ ] New code bypasses existing permission/authentication boundaries.

---

## P1 Required Checks

- [ ] Similar code was searched before adding a new helper or abstraction.
- [ ] Plugin lifecycle method is appropriate for the behavior.
- [ ] API changes state compatibility impact.
- [ ] Tests or manual verification cover success, validation failure, and dependency failure.
- [ ] Logs contain safe troubleshooting context.
- [ ] Build/test command was run, or the exact runtime limitation is reported.

---

## Delivery Note Shape

When finishing a task, report:

```text
Platform: <confirmed product family>
Changed: <files / behavior>
Verification: <commands run and result>
Metadata: <verified source or not applicable>
Residual risk: <runtime-only checks, if any>
```