To run AI security code review on GitHub pull requests without drowning in false alarms, run deterministic rules first for hard stops (secrets, removed CI safety guards, and protected paths), then use an evidence-gated security checklist that only raises a pull request's risk lane when the model quotes an exact line from the diff.

MergeJudge is an AI pull request reviewer with an open-source engine for GitHub. Every pull request is sorted into an auto , review or block lane: deterministic rules set the floor first, and the AI step can only raise a lane. auto means low risk, not a guarantee; branch protection and required checks still apply, and MergeJudge doesn't merge pull requests itself.

1.…