The Second Opinion

For a CTO who wants a critical system read by someone who did not build it.

One signal · 7 specialists · one result

Challenges decisions4
Audits and guards3

How the work moves

Four steps, each done by one specialist

Starts with

A critical system that needs an outside read

First

1Assigns read-only reviewers from different model familiesIssue Review Panel 2Reads the system as an attacker wouldRed Team Reviewer

Then

3Points every finding to a file and lineCode-Grounded Reviewer 4Merges the findings and ranks them by severityIndependent Code Auditor

Ends with

Ranked findings, each with its file and line

the signalthe resultEach step is done by one specialist on the crew

The story

Several reviewers from different AI model families read the system in parallel, and none of them may change anything. One works as an attacker. Their findings are merged, ranked by severity and handed over with the file and line for each.

The crew

The specialists behind this role, grouped by the kind of work they do.

Challenges decisions

Red Team ReviewerAttacks every major decision and every change of scope from a different model family than the builders, looking for the assumption that breaks, and holds approval until it has answered.Also serves The Advisory Board, The Software Department
Issue Review PanelIt assigns AI advisors distinct roles (mediator, technical expert, security auditor, devil's advocate, referee, pragmatist and innovator), has them review an issue together, and follows the issue for changes.Also serves The Incident Commander
Code-Grounded ReviewerReviews a team's claims about finished work with search access limited to that system's code, so every finding points to a file and line.Also serves The Review Panel
Independent Review ClerkIt matches the verdict to the review that was requested and releases or holds the project exactly once.Also serves The Change Board

Audits and guards

Security Attack TesterThrows command injection, path traversal, header injection, forbidden schemes, forged identities and runaway tool chains at every tool and fails the build if any attack gets through.Also serves The Security Officer
Dead Code FinderLists functions and types that nothing appears to call, as candidates for a person to review.Also serves The Due-Diligence Analyst
Independent Code AuditorAudits a running system read-only in parallel tracks (interfaces, storage, runtime and deployment, test honesty) and reports every finding with file, line and severity against what the documentation claims.Also serves The Due-Diligence Analyst

Where this crew also works

The Due-Diligence Analyst22

Each bar counts the specialists this role shares with another.

Routes

Routes this role works in. Its place in each one is filled in.

An acquisition becomes a working team

The engineering behind this role

Governed autonomous engineeringCapability Role contracts, with vendors as dataIdea Separation of duties for AI workEngineering story All capabilitiesThe engineering, by what it does