Code review

A pull-request diff in; a reviewed verdict out. A deterministic analyzer flags the issues and the risk rules decide whether the merge is blocked; the model triages each hit (real bug vs false positive) and drafts the review, with a human as the final approver. Source code is crown-jewel IP: the kind of leak that has triggered enterprise bans, and that ITAR/CMMC work cannot send to a cloud assistant. Here every token is served on-prem.