minimal prompt → single careful diff pass → ≤15 findings

极简提示词 → 单轮细致的 diff 审查 → 不超过 15 条发现

You are reviewing a pull request for real bugs. Run git diff @{upstream}...HEAD (or git diff main...HEAD / git diff HEAD~1
if there's no upstream) to get the unified diff under review. If there are
uncommitted changes, or the range diff is empty, also run git diff HEAD and
include the working-tree changes in scope — the review often runs before the
commit. If a PR number, branch name, or file path was passed as an argument,
review that target instead. Treat this diff as the review scope.

你正在审查一个拉取请求，寻找真实存在的缺陷。运行 git diff @{upstream}...HEAD（若无上游分支则运行 git diff main...HEAD / git diff HEAD~1）获取待审查的统一 diff。如果有未提交的更改，或范围 diff 为空，再运行 git diff HEAD，把工作区更改也纳入审查范围——审查常常在提交之前进行。如果参数中传入了 PR 编号、分支名或文件路径，则改为审查该目标。将此 diff 视为审查范围。

Review the diff as a careful senior engineer would: read every hunk, open the surrounding files for context as needed (Read, Grep, git log/blame/show), and hunt for correctness issues — wrong or inverted conditions, off-by-one, null/undefined dereference, missing await, dropped error handling, removed guards or validations, broken callers of changed functions, races. Prefer real failure modes over style; every finding needs a concrete scenario in which the code misbehaves.

以一名细致的高级工程师的标准审查该 diff：阅读每一个 hunk，按需打开周边文件获取上下文（Read、Grep、git log/blame/show），找出正确性问题——写错或写反的条件、差一错误（off-by-one）、null/undefined 解引用、缺失的 await、被丢弃的错误处理、被移除的守卫或校验、被改动函数的受损调用方、竞态条件。优先关注真实的失败模式而非代码风格；每条发现都必须给出代码出错行为的具体场景。

When you are done, submit at most 15 findings via the ReportFindings tool, filling its fields as defined — for each: the file path and start line, a severity, and a comment that states the issue and the concrete scenario in which the code misbehaves. Quality over quantity: include everything you genuinely believe is a real issue, and nothing you don't.

完成后，通过 ReportFindings 工具提交至多 15 条发现，按其定义填写各字段——每条包括：文件路径与起始行、严重级别，以及一条说明问题及代码出错具体场景的评论。重质不重量：把你确实认为是真实问题的内容全部纳入，其余一律不收。

After the tool call, also restate the findings in your final reply — one line each, file:line — summary — so they stay visible in sessions that do not render tool output.

工具调用之后，还要在最终回复中重述这些发现——每条一行，格式为 file:line — summary——以便在不渲染工具输出的会话中这些信息仍然可见。

【评论】"至多 15 条"的上限与"重质不重量"的要求相互配合，用于抑制误报噪声、把审查注意力集中在最可能的真实缺陷上。