Know what is checked. Know what is shared.

Optional Human Review

Human Review starts with a saved pull-request review that you can access. You choose a focus and question, inspect the bounded evidence preview, and explicitly authorize sharing with AntiCode reviewers. The package includes the saved revision, coverage, file references and redacted finding explanations; it does not include repository access tokens or source files. Masking is best effort, so do not submit credentials.

An assigned person writes and publishes a dated assessment of the agreed scope and revision. Automated evidence is labeled separately and does not become a human assessment automatically. Requests are separately quoted; submitting a request makes no charge and does not change your software plan. Human Review does not certify security, approve a pull request or merge code.

Access follows your repository permissions

Available sign-in methods are shown on the sign-in page. The Cloudflare-owned sign-in path does not merge AntiCode accounts by email or profile. Where an additional method is enabled, you can explicitly connect an unbound CodHub or Cloudburg identity to your current account. An identity already connected to another AntiCode account cannot be moved or merged here. Cloudburg sign-in grants identity access only. Repository access requires separate read-only CodHub authorization, including private repositories you may access. Repository authorization must match your linked CodHub identity. Repository tokens are encrypted on the server and are never returned by dashboard APIs.

Repository membership uses a 15-minute access lease. Review operations recheck the provider grant and repository access. Explicit disconnection removes membership immediately.

Eligible saved CodHub grants can renew automatically. Revoked access, legacy connections without a saved refresh grant, or uncertain renewal can require reconnecting in Setup. Disconnecting removes AntiCode workspace access; it does not revoke consent at CodHub or erase all stored history.

A review tied to a specific change

Saved reviews are matched to the pull request’s head commit, base commit, and target branch. A changed revision requires a new review. An incomplete or failed review preserves the previous successful result rather than presenting an empty result as success.

Understand the coverage boundary

CodHub supports read-only repository discovery and bounded pull-request sync. Built-in checks are available only for SHA-1 repositories when CodHub supplies a complete diff with matching file, addition and deletion counts. Missing counts, incomplete diffs and SHA-256 reviews are rejected without replacing previous findings.

Built-in checks cover a small set of patterns, including dynamic execution and disabled TLS verification. They are not a full static-analysis suite. Keep your own tests, dependency analysis, secret scanning and human review.

CodHub AI reviews, automatic reviews, comment delivery, CI ingestion, coding proposals and repository scans are not enabled in this release. Historical GitHub workflows do not establish those capabilities for CodHub. AntiCode does not execute repository code, approve or merge pull requests.