name: review-spec-security-opus
version: 1
description: Security review of a spec draft using Opus security-review
runtime: opus-security-review
input:
  state: spec-draft
  tags_required: [security-sensitive]
  required_artifacts: [spec_file]
output:
  state: spec-reviewed-security
scope_budget:
  files_modified_max: 5
  lines_diff_max: 300
  wall_clock_seconds_max: 3600
nodes:
  - id: agent
    kind: agent
    template: opus-security-review