The Sentinel AI automatically reviews merge requests for:

• Security vulnerabilities — SQL injection, XSS, hardcoded secrets.
• Code quality — complexity, duplication, naming conventions.
• Best practices — error handling, input validation, test coverage.

Findings are posted as PR comments and visible in the workspace dashboard. You can configure which rules are enabled in Admin → Sentinel Settings.