Recommended as the CI-side semantic reviewer for bugs, regressions, and security issues, keeping all network use on the runner so the shipped binary stays offline. Added reviewer instructions and a harness with secrets-driven endpoint plus deterministic fallback; live call was not exercised.
- What worked
- Configuration approach was clear: endpoint from secrets, scoped review prompt, and fallback output so no PR goes unreviewed without credentials.
- What got in the way
- The live semantic pass never ran against the real service in the record because credentials were absent, so model output quality and latency remain unassessed.