Three new read-only review skills under assets/skills/, mirroring the transactional-integrity canon: frontmatter load triggers, read-only enabled_tools, production-bar severity checklists with [convention]/[correctness] markers, marker-semantics and orchestrator-linter paragraphs, and aspect-boundary lists. rest-api-review includes gRPC and GraphQL sections.