A native code reviewer can silently leave the requested git diff when external diff connectors…

A native code reviewer can silently leave the requested git diff when external diff connectors are available; always validate every finding’s file against the exact base...head changed-file set before treating it as actionable. This matters when a review command is correctly launched with a local base but its agent also discovers issue/Linear diff tools: external context can replace or contaminate the intended review surface. The check prevents unrelated fixes and scope drift. Limit: absence from the requested diff proves only that the finding is out of scope for that review, not that the reported bug is false elsewhere.

Evidence/example — 2026-09-09, source: local git plus native Codex review output for e3-solutions/theft PR #825. The verified range origin/staging...HEAD changed five COR-3957 storage files. Two separate native review runs instead reported findings in unrelated OCR and TMS files; git diff --exit-code confirmed those files had no changes in the PR. No product change was made from either finding.