Skip to content

PatchPatrol by aistack

Private, bounded AI code review for GitLab

Review GitLab merge requests through a model endpoint you control. PatchPatrol also supports GitHub Actions and local diff reviews.

Run PatchPatrol in infrastructure you choose and configure the model endpoint it calls. Remote providers receive the selected review context under their own data-handling terms.

PatchPatrol by aistack

Preview of the PatchPatrol HTML Run Report on the homepage

Concept

AI-assisted code reviews

Transparent AI use

Use the endpoint you configure

PatchPatrol sends selected review context only to the model endpoint you configure. You can also restrict calls with an endpoint allowlist. If that endpoint is remote, the provider receives the selected content under its own data-handling terms.

Configured endpoint, optional allowlist

Limited context

Review relevant changes

PatchPatrol limits changed files, changed lines, diff size, and any supporting context before review.

MR, GitHub PR, and local diff context

Directly traceable

Feedback in review context

Depending on your setup, PatchPatrol publishes a compact GitLab Review Summary. Priority Findings appear as inline discussions on the affected lines. The HTML Run Report contains the full record of the run. Reviewers can quickly see what needs a closer look.

GitLab Review Summary, inline findings, HTML Run Report

Risk in focus

Spot risks sooner

PatchPatrol surfaces signals that deserve attention and adds context for the affected change.

Context for decisions

Repository-aware rules

Review code against your team's own rules

For individual paths, components, and file types, teams can define targeted review guidance. PatchPatrol checks changes against your project's standards instead of relying only on generic review logic.

Technical documentation

.ai-review.yml

Repo-local review rules
01 version: 1
02 review:
03 rules:
04 - id: privacy.no-raw-payload-logging
05 severity: error
06 scope:
07 - "src/api/**"
08 instruction: "Flag new logging paths that could expose raw request data."
09
10 - id: tests.runtime-behavior-needs-regression
11 severity: warning
12 scope:
13 - "src/**/*.py"
14 instruction: "Check whether behavior changes include regression coverage."

Pipeline integration

AI feedback directly in your pipeline

PatchPatrol extends your existing merge request or pull request pipeline. Feedback appears directly in the CI run so reviewers can see which changes need attention.

Uses existing tools from your project

Node
Python
Go
Java
Ruby
Rust

GitLab CI

.gitlab-ci.yml
01 include:
02 - component: $CI_SERVER_FQDN/patchpatrol/components/gitlab-review@1.0.0
03 inputs:
04 feedback-mode: artifact-only
05 readiness-mode: 'off'
06 output-dir: .ai-review
07 artifact-expire-in: 7 days

How it works

Selected change, bounded context, traceable review result.

  1. Step 01

    Code change as the starting point

    The run starts with a concrete change: a GitLab merge request, a GitHub pull request workflow, or a local diff.

  2. Step 02

    Bound the relevant context

    Configured limits cap changed files, changed lines, diff size, and any supporting context before the provider call.

  3. Step 03

    Trust checks before AI review

    Before provider calls, PatchPatrol applies configured review bounds and optional endpoint restrictions. It applies pattern-based redaction to extracted diff chunks and fails closed on detected high-confidence patterns.

  4. Step 04

    Code review

    The LLM checks the change context, scope limits, and affected code paths. The result is a set of prioritized findings with clear reasoning.

  5. Step 05

    Make findings traceable

    PatchPatrol validates the model response before publishing any feedback. The compact GitLab Review Summary shows what needs a closer look. Priority Findings appear as inline discussions on the affected lines, while the HTML Run Report contains the full record of the run.

Next step

Evaluate PatchPatrol in your GitLab workflow

Tell us about your GitLab review job, the model endpoint you plan to use, and what PatchPatrol needs to prove in your environment. We will reply with evaluation and pricing information. Product access and any pilot are agreed separately.