# add-check

Build step #3: the `/hygiene` command surface plus the `hygiene-check` skill — scanner shortlist → Sonnet classification (judgment only) → a model-free deterministic finalize pass (`report_builder.py`) that computes `expected_sha256`, looks up `is_destructive`/`is_reversible` from `exact_edit.kind`, derives `safety_tier` via the single-source function, and sources `raw_tokens` from the token estimator → validate-before-rollover → write the one report pair and stamp `last_check`. Adds hermetic classifier golden examples. Consumes the frozen `report-schema`.