Perform a scoped defensive review of a repository change covering trust boundaries, secrets, input handling, permissions, dependencies, and abuse cases.
