A Read-Only AI Reviewer for Forgejo Pull Requests

The author built a self-hosted Forgejo pull request review bot in roughly 1,700 lines of Python that fetches PR diffs, sends them to a model via OpenRouter, and posts a summary comment plus inline findings as COMMENT-only reviews it cannot use to approve or block merges. A second verification pass downloads the PR head as a tar.gz snapshot and gives the model read-only file, grep, and directory tools to confirm, correct, refute, or flag findings as uncertain before posting. On a 44-file PR, 18 of 29 findings were discarded after checking the code, and the bot runs as a Read collaborator on an internal network with no published ports.