Code Review Agents Read The Branch, Not The Base

Lock the files down at the organization level. Put them behind CODEOWNERS. Test the bypass yourself before someone else finds it for you. Treat the prompt the same way you’d treat the pipeline it’s meant to guard — because in any setup where the branch can rewrite the reviewer’s instructions, nobody is.