This is a quick static pass over a local Cargo package, useful for catching known issues before you go further. It is not an audit.
or, from your shell:

What it does

The review is Phase A only, and it uses no model. It captures a snapshot of a local Cargo package and runs offline static tools, oms-sast and cargo-audit, inside a pinned review-tools container. Reports are private and expire after 30 days. Every report carries a disclaimer that begins “Not a professional audit”.

What it does not do

Phase B and model dispatch are not available, and the review is not a substitute for an audit.

If it fails

The review tools run in a pinned container, so run npx @barestate/oms doctor and read the Docker line. If a report has expired, run the review again.