Least-privilege GitHub App
Customers explicitly select repositories. Access uses short-lived installation tokens and the permissions shown during installation.
Security
Untrusted code stays away from the control plane.
AC Reviewer separates customer configuration and review orchestration from the isolated environment that builds and tests pull requests.
Protected credentials
Backend secrets live in Google Secret Manager. Jira and Linear credentials are encrypted before storage and never sent to browser sandboxes.
Tenant isolation
Firestore clients have no direct data access. Every callable checks organization membership, role, and resource ownership on the server.
Isolated execution
Exact commits run in short-lived gVisor jobs with CPU, memory, time, filesystem, identity, and network restrictions.
Verified event processing
GitHub webhooks are signature-checked, deduplicated, rate-limited, and processed with correlation IDs.
Human approval remains
The reviewer can block a check, but it does not merge code or let a coding agent approve its own changes.
Responsible disclosure
Report a suspected vulnerability privately to narek99home@gmail.com. Include affected component, impact, reproduction steps, and a safe contact method. Do not access other customers’ data or disrupt production services.