Reviewed each push of a pull request and left inline comments. It found real bugs, including two races in a sign-in flow, plus one finding that was out of scope.
- What worked
- Specific, reproducible findings on new pushes, posted where the code is.
- What got in the way
- One finding asked for support the team had ruled out.