Merge master (post-#113 identity checklist) into docs/issue-108-compact-controller-handoff

skills/llm-project-workflow/templates/review-pr.md

@@ -13,9 +13,14 @@ Rules (llm-project-workflow):
 - Do not merge if any check fails.
 
 Steps:
-1. Verify your authenticated identity (whoami) and the active profile.
-2. Fetch the PR facts: PR author, head SHA, state (must be open), base branch.
-3. If authenticated user == PR author → STOP (no self-review).
+1. Identity Checklist: Before claiming/working on review, verify and state:
+   - Required identity/profile for this task: reviewer (allowed to review/approve/request_changes)
+   - Current authenticated identity (from whoami): <username>
+   - Target task role: reviewer identity (must NOT be the PR author)
+   *If the current identity does not match the required role (or is the PR author), STOP. Relaunch/switch to the correct profile first.*
+2. Verify your authenticated identity (whoami) and the active profile.
+3. Fetch the PR facts: PR author, head SHA, state (must be open), base branch.
+4. If authenticated user == PR author → STOP (no self-review).
 4. scripts/worktree-review <pr-head-branch>          # detached, branches/review-*
    cd branches/review-<pr-head-branch-slug>
 5. Confirm the worktree is clean. Inspect the FULL diff; confirm scope matches