Review method · Product preview

See how a review becomes a finding.

Start with what must be true, challenge the work through independent lenses, and keep evidence, uncertainty, and the host decision connected.

See a sample finding Inspect the boundary

In four moves

See the shape before the detail.

01
Set the bar
Define what must be true before the work is accepted.
02
Bound the context
Make what Panda may inspect and what it cannot see explicit.
03
Challenge independently
Review through separate lenses before conclusions are synthesized.
04
Decide with evidence
Keep findings, uncertainty, and the host handoff in view.

Start with the output

A finding shows what to check next.

The claim, evidence references, uncertainty, materiality, and smallest useful next check stay together so a host can challenge the review without accepting private reasoning as proof.

High materialityUnsupported material claim

Atomic finding

The recommendation treats EU storage as proof that inference processing also remains in the EU.

Claim challenged: “The vendor meets the team's EU data-residency requirement.”
Why it matters: The recommendation treats EU storage as proof that inference processing also remains in the EU.
Uncertainty: No authorized artifact states where inference processing occurs.
Smallest useful next check: Obtain current processor-region documentation or narrow the recommendation to the supported storage claim.

Inspect evidence references

vendor-data-policy.pdf §4.2
The supplied policy covers where stored data is held.
team-requirements.md §2
The requirement covers both storage and processing in the approved region.

Host disposition · illustrative only

InvestigateDefer

The review method

The acceptance contract comes first.

One lifecycle keeps every review pack legible while the context, evidence, uncertainty, and host authority stay explicit.

01
Define the bar
Set the objective, artifact, acceptance contract, risk, and review budget.
02
Bound the context
Preview inclusions, exclusions, freshness, and retention before consent.
03
Review independently
Launch capability-scoped advisor attempts without sharing their conclusions.
04
Challenge the evidence
Search for missed requirements, unsupported claims, counterexamples, and failure modes.
05
Preserve disagreement
Return atomic findings, evidence, uncertainty, disagreement, and legitimate abstentions.
06
Host decides
Accept, reject, investigate, defer, or act outside Panda with the boundary still visible.

Independent attempts

More perspectives only help when their boundaries stay clear.

One shared kernel can support different review packs because each attempt declares what it may inspect, what it is looking for, and what it cannot establish.

Capability-scoped context

An attempt sees only the artifacts, tools, and budgets declared for its lens. Credentials and privileged authority are not implied by a review request.

No conclusion sharing

Independent attempts form separate perspectives. Synthesis happens after the attempts produce their own findings, evidence references, and uncertainty.

Falsification before synthesis

The review searches for missed requirements, unsupported claims, counterexamples, alternative explanations, and failure modes before it summarizes.

Honest outcomes

Uncertainty is part of the result.

Panda is designed to make unresolved states useful. The review can narrow the next question without pretending that missing evidence has been resolved.

Disagreement

Material perspectives remain visible when the authorized evidence does not support one clean conclusion.

Abstention

An attempt can decline to support a claim when the relevant artifact, verifier, or authority is missing.

Needs input

The smallest useful next check can be a request for narrower evidence, a clearer contract, or an explicitly authorized source.

The proof standard

Proof without a mystery score.

Panda separates operational reliability, product usage, verified effectiveness, and measurement integrity. A result carries its coverage, uncertainty, ground-truth quality, limitations, effort, latency, and cost instead of collapsing into one number.

Observed

Directly recorded platform behavior and lifecycle facts.

Host feedback

A person's or system's disposition—not ground truth.

Verified

Supported by an external verifier or adjudication on the covered subset.

Comparative

Measured against a declared matched or experimental baseline.

No composite Panda score. More reviewers, more findings, or reviewer agreement are diagnostics—not proof that the work is correct.

Delivery surfaces

Use Panda where consequential work already happens.

Adapters project one review contract. Their availability is labeled honestly while the connected service is still being built.

Web

Product preview

Plugin / skill

Planned

MCP

Planned

REST / SDK

Planned

A2A

Planned

Planned surfaces will become available only when their authentication, privacy, cancellation, error, and fallback behavior is working and documented.

Method questions

Review the review.

The method is a boundary and evidence contract, not a promise of universal correctness.

What makes an advisor attempt independent?

Each attempt receives capability-scoped context and declared review lenses without receiving another attempt's conclusions. Its evidence references and limitations stay attached to the finding it supports.

What happens when the evidence is not enough?

Panda can preserve a disagreement, abstain, or request more input. Missing evidence, a stale source, or an unavailable verifier remains unknown rather than becoming a pass.

Why does Panda return findings instead of a score?

A finding can connect a material claim to its evidence, uncertainty, and next check. Reviewer count, agreement, and raw finding count are diagnostics—not proof that work is correct.

Who decides what happens after a review?

The person or host system retains authority to accept, reject, investigate, defer, or act. The preview shows illustrative dispositions only; it does not save or execute an action.

See it in context

Start with one inspectable decision.

See a sample finding

See the shape before the detail.

Set the bar

Bound the context

Challenge independently

Decide with evidence

A finding shows what to check next.

The recommendation treats EU storage as proof that inference processing also remains in the EU.

The acceptance contract comes first.

Define the bar

Bound the context

Review independently

Challenge the evidence

Preserve disagreement

Host decides

More perspectives only help when their boundaries stay clear.

Capability-scoped context

No conclusion sharing

Falsification before synthesis

Uncertainty is part of the result.

Disagreement

Abstention

Needs input

Proof without a mystery score.

Observed

Host feedback

Verified

Comparative

Use Panda where consequential work already happens.

Review the review.

Start with one inspectable decision.

See the shape before the detail.

Set the bar

Bound the context

Challenge independently

Decide with evidence

A finding shows what to check next.

The recommendation treats EU storage as proof that inference processing also remains in the EU.

The acceptance contract comes first.

Define the bar

Bound the context

Review independently

Challenge the evidence

Preserve disagreement

Host decides

More perspectives only help when their boundaries stay clear.

Capability-scoped context

No conclusion sharing

Falsification before synthesis

Uncertainty is part of the result.

Disagreement

Abstention

Needs input

Proof without a mystery score.

Observed

Host feedback

Verified

Comparative

Use Panda where consequential work already happens.

Review the review.

Start with one inspectable decision.