Go adversary

Go language pack — runs the full Go specialist suite (concurrency, security, http, modules, …) plus this package’s own TLS/shell/permissions checks.

Goals

The adversary is designed to produce a small number of high-confidence, actionable findings grounded in concrete repository evidence. Its review should be deterministic where possible, explicit about impact, and quiet when the available evidence does not justify a finding.

Scope

It provides the transitional generic Go review layer and composes the specialist Go adversaries while retaining a small compatibility rule set.

The complete detector or review inventory is maintained in CHECKS.md.

Boundaries

It is a transitional composition layer; new Go domain rules belong in the bounded go/* specialist that owns them.

SDK source coverage

The SDK dependency follows the published SDK version pinned in package.json. This reviewer uses deterministic prepared evidence rather than repository-tool model retrieval, so it has no model coverage result to reinterpret. Existing evidence gates and deterministic findings are preserved.

SDK output-repair preparation

This release uses SDK 0.1.43, including bounded output repair and rejected/interrupted completion usage preservation. This composition keeps its deterministic checks. Refresh child-version pins after the leaf adversaries are released, then release lang/go before review/code.

SDK 0.1.43

This release rebuilds with SDK 0.1.43. SDK PR #73 adds a tested neutral fallback to formatOpinionAsync when concern wording validation is exhausted, preserving completed findings and the ship decision. Reviewers that do not call this API retain their existing opinion behavior. Provider and transport failures remain errors. Domain rules and evidence requirements are unchanged.