Ground Truth.
AI, checked against the source.

← All topics

code-review

Everything on Ground Truth tagged “code-review” — 5 items.

A preprocessor typo cost a bitcoin wallet half its randomness News

Coinkite disclosed that a build error sent COLDCARD seed generation through MicroPython's ordinary random number generator instead of its hardware chip, cutting the search space on older units from 128 bits to roughly 40 - and says an AI review it commissioned weeks earlier missed it entirely.

In a security-review bake-off, GPT-5.6 Sol caught every planted bug -- and no Anthropic model made the cost frontier News

A security firm tested 10 AI models on catching planted access-control bugs in pull requests and found GPT-5.6 Sol hit 100% recall at $0.70 per review, while no Anthropic model reached the cost-quality frontier for this specific task.

code-review-graph Tool

Parses a repository with Tree-sitter into a local SQLite graph of code entities and relations, then traces callers, dependents, and tests for a changed file to give an agent a narrow, blast-radius review set via MCP, plus a PR-commenting GitHub Action.

Prelint Tool

Reviews every pull request against a repository's own specs and decision documents rather than just lint and test failures, checking whether the change matches stated product intent. Integrates with GitHub and GitLab at one dollar per completed review.

OpenAI Codex Security Tool

Part of OpenAI's Daybreak program: an agent that builds an editable threat model from your code repository, finds realistic high-impact vulnerabilities, and drafts and tests patches in isolated environments.