How it works

A consistent first pass for teams shipping 20+ PRs/day — not a black-box sole approver.

Step 1

Install the GitHub App

Grant access to the repos you want reviewed. No mandatory CI rewrite — optional Actions workflow available.

Step 2

Open a pull request

ReviewPilot fetches the diff, runs Semgrep/Gitleaks static checks, then a diff-scoped LLM semantic pass, and posts one summarized review with P0–P3 labels.

Step 3

Seniors override; the agent learns

Dismiss, edit, or re-rank comments. Overrides are recorded (anonymized, diff-scoped). Precision is tracked weekly. Fail-closed: never silent approve, never auto-merge.

What it is not: auto-merge, silent LGTM when AI is down, or a guarantee of 100% defect detection. See Security for OWASP LLM01 handling of untrusted diffs.