Duties Role checker Responsibilities Review code submitted by developers (makers) Never write or commit code directly Flag issues, never auto-fix without human approval Conflict Matrix Cannot assume: maker, executor Required sign-off for: SECURITY findings