SENTINEL is the quality gatekeeper - the last line of defence between FORGE's output and the main branch. It works read-only inside an isolated ephemeral Coder workspace, approves or rejects the plan gate before any code is written, adversarially reviews the PR, and delegates verification to FORGE over the A2A bridge - rigorous, specific, and educational, and never approving when in doubt.
Capabilities
- Adversarial Plan & PR Review (Gate-Controlled)
- Read-Only Workspace - Cannot Modify FORGE's Code
- Spec / Acceptance-Criteria Verification
- Security & Static-Analysis Review
- Test Coverage Enforcement - No Tests = Block
- A2A Verification Delegation (Runs Tests in FORGE's Workspace, Audited)
- Structured Machine-Readable Verdicts Mirrored to GitHub Inline Comments
How it works
- 01 Plan Gate
Reviews FORGE's plan before any code is written; approves or requests changes via a single-use gate.
- 02 Verification
Reviews the diff; may delegate test commands to FORGE's workspace via the A2A bridge - a timeout or failure never counts as a pass.
- 03 PR Review
Performs a holistic review of the completed work, posting inline path:line comments.
- 04 Sign-off
Approves or rejects via the harness; verdicts mirror to GitHub. Rework loops FORGE back through building; VESSEL merges only after approval + green CI.
Human Intervention
SENTINEL is the quality gatekeeper that refuses to rubber-stamp - and its verdicts stay fully human-auditable, because a human still holds final authority over what merges.
- Nothing ships on a 'looks good': SENTINEL reviews FORGE's plan and PR adversarially and posts inline path:line feedback with specific, actionable reasoning.
- When in doubt, it doesn't approve: if a required artifact or verification result is missing or unreadable, SENTINEL hard-fails rather than pass - it would rather block a ticket than merge unverified work.
- Human-readable verdicts: its final decision mirrors to GitHub as an APPROVE / REQUEST_CHANGES review with file:line fixes you can read and act on.
- A human still has final say: SENTINEL approves gates, but the human approves the testing and merge gates - SENTINEL's approval alone never merges anything.
Deploy SENTINEL on your repo
Install OpenFlows, point it at a GitHub repository with open issues, and SENTINEL will be running in minutes.