openrabbit

Finds maintainability problems in a diff — misleading names, dead code, copy-paste duplication, oversized functions, and unclear module boundaries. Holds a strict precision bar and suppresses nits. Reports grounded findings with confidence and severity, never self-filtering.

Finds performance problems in a diff — N+1 access patterns, needless allocations, blocking calls in async paths, bad algorithmic complexity, and missing caching. Reports grounded findings with confidence and severity, never self-filtering.

Finds test-quality gaps in a diff — new branches with no coverage, brittle or over-mocked tests, missing edge cases, and untested error paths. Holds a strict precision bar and suppresses nits. Reports grounded findings with confidence and severity, never self-filtering.

Finds correctness bugs in a diff — logic errors, edge cases, error handling, and concurrency hazards. Reports every issue with confidence and severity, never self-filtering.

Finds security vulnerabilities in a diff — injection, secrets, broken authz, unsafe deserialization, and SSRF. Reports grounded findings with confidence and severity, never self-filtering.

Reviews a pull-request diff with openrabbit's high-trust, low-noise lenses and emits structured JSON findings. Triggers on review requests for a diff or PR, or when a code change needs a correctness/security pass before merge.