Overview
Human review time is the scarce resource. This assistant does the first pass — the mechanical checks, the convention violations, the obvious correctness and security problems — so the human reviewer spends their attention on design and intent.
It posts comments; it does not approve or block. Merge authority stays with people.
Business value
Shortens review cycles and catches routine issues before a human spends attention on them.
Expected outcome
Every pull request receives a first-pass review with inline comments within minutes of opening.
Problems it solves
- Review queues block delivery
- Convention violations consume reviewer attention
- Security issues slip through under time pressure
- Review depth varies with reviewer workload
Who it is for
- Engineering teams with meaningful PR volume
- Open-source maintainers triaging contributions
- Teams enforcing consistent conventions
Benefits
- First-pass review arrives in minutes, not hours
- Consistent standard regardless of who is on rota
- Security patterns checked on every change
- Human reviewers start from a triaged list
Limitations
- Produces false positives — the human triage step is essential
- Weak on architectural judgement and product intent
- Needs repository retrieval to be useful on a large codebase
- Must never gate merge on its own
Success metrics
- Time to first review comment
- Precision of flagged issues (accepted versus dismissed)
- Defects caught before human review
- Cycle time from PR open to merge
Implementation guide
Run it in comment-only mode for a month and track which comment categories your team actually accepts. Turn off the categories with poor precision — a noisy bot gets muted, and then it catches nothing.
Flow diagram
Every step in order, colour-coded by how much of it runs without a human.
Scroll to pan · use the controls to zoom, expand or export.
Steps
7 steps from trigger to result.
Retrieve repository context
- This step is the difference between a useful reviewer and a linter with opinions
Review for correctness
Review this diff for correctness. You have the surrounding repository context.
Diff:
{{diff}}
Context:
{{context}}
For each issue found:
- file and line
- what is wrong
- a concrete failure scenario: specific inputs or state that produce the wrong result
- suggested fix
Only report issues you can describe a concrete failure for. Do not report style preferences here. If the diff looks correct, say so — a clean review is a valid result.
Review for security
- Anything touching authentication, authorisation, payments or user data should escalate to a named human reviewer regardless of the finding
Check conventions
Post inline comments
- Cap the comment count — thirty comments on one PR gets the bot muted permanently
Human review and merge
AI tools
Each tool records the role it plays and whether it is required.
ChatGPT
Primary
Required
OpenAI's conversational AI assistant for writing, research, coding, data analysis and everyday work
Claude
Supporting
Required
A safety-focused AI assistant built for long documents, careful reasoning and real work.
G
GitHub Copilot
Supporting
Optional
The default AI pair programmer — inline completion in every major editor, plus PR review.
C
Cursor
Supporting
Optional
An AI-native code editor — it reads your whole repo and edits across files, not just the cursor line.
Integrations
Services this workflow connects to, and how each authenticates.
Prompt library
Every prompt in the workflow, in chain order. Swap the highlighted placeholders for your own values.
Review this diff for correctness. You have the surrounding repository context.
Diff:
{{diff}}
Context:
{{context}}
For each issue found:
- file and line
- what is wrong
- a concrete failure scenario: specific inputs or state that produce the wrong result
- suggested fix
Only report issues you can describe a concrete failure for. Do not report style preferences here. If the diff looks correct, say so — a clean review is a valid result.
Prerequisites
Have these ready before you start.
Use cases
Pre-review triage
Catch routine issues before a human opens the PR.
Shorter review cyclesOpen-source contributions
Give first-time contributors immediate, consistent feedback.
Faster contributor onboardingSecurity-sensitive repositories
Run a security pass on every change automatically.
Consistent security reviewMetrics
Author estimates — treat them as a starting point and measure your own runs.
Accepts
Produces
FAQ
Should it block merges?
How do we stop it being noisy?
Does our code get used for training?
Reviews
No reviews yet — be the first to share how this worked for you.