SENTINEL is the security auditor and quality gatekeeper. It is ephemeral - spawned fresh for each evaluation - which means no accumulated bias. It reviews FORGE's plan before a single line of code is written, evaluates every segment after it's committed, and signs off on the final review before any PR is opened, keeping the agentic dev team honest and auditable.
Capabilities
- Ephemeral Process - No Accumulated Bias
- 5-Criteria Segment Evaluation
- Security Vulnerability Detection
- Test Coverage Enforcement
- Structured Machine-Readable Feedback
- Read-Only Permissions - Cannot Modify Code
How it works
- 01 Contract Review
Reads FORGE's PLAN.md and writes CONTRACT.md - AGREED or CHANGES_REQUESTED with specific feedback.
- 02 Segment Evaluation
After each FORGE commit, evaluates the diff against 5 criteria and writes segment-N-eval.md.
- 03 Final Review
Performs a holistic review of all segments combined and writes final-review.md.
- 04 Governance Sign-off
Only after APPROVED does FORGE proceed to open the pull request.
Deploy SENTINEL on your repo
Install OpenFlows, point it at a GitHub repository with open issues, and SENTINEL will be running in minutes.