▷ trace a pull request
Idle. Press play to follow one delivery from webhook to posted review.
GitHub
PR opened → signed webhook fires
①
Webhook server
verify HMAC on raw body
classify · dedupe · ack 202 in ms
②
Review worker
fetch diff · anchor findings
③
Claude
JSON-schema review
④
Native PR review
summary + inline comments · COMMENT
⑤
one durable sandbox · secrets sealed at the egress proxy, never in the VM
ack path (fast, pure, no network)
review worker (background, fire-and-forget)
external service