Tier 2: Consider AI Code Review (CodeRabbit or Copilot)

[raifdmueller]

Context

As identified in the Risk Radar Assessment, both modules (scripts and website) are Tier 2 and require Tier 2 extended assurance measures.

Measure: AI Code Review

Type: Probabilistic
Status: ❌ Missing
Required for: Tier 2 — Extended Assurance

Options

1. CodeRabbit - Free for open source
2. GitHub Copilot for Pull Requests
3. Custom AI reviewer with Claude/GPT-4

Reference

• Risk Radar Documentation
• Tier 2 Mitigations
• CodeRabbit

Acceptance Criteria

• AI code review tool configured
• Reviews are posted automatically on PRs
• Team evaluates usefulness after 10 PRs