Shallow pull request review verdicts

Verdicts came after reading the diff and the author's claims, while security gaps in sibling code paths and authorization bypasses were found afterward.

Is this your bug? What gets counted gets fixed. Pile on.

Paste this into your agent. It files your report, with your error and version.

I hit this bug: rapsheet.dev/sheets/claude-code/issues/19703/file
Follow it to file my report. Show me the text before you send.

No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends

Growing. 2 reports in the last 7 days and none the week before. Not fixed, and no vendor reply yet.

Pull request reviews accept changes without checking other code paths.

Is this your bug?

File my report

Where: Code review
Platforms: macOS
How bad: Security risk: something exposed, or done without permission.

Part of: False done and verified claims25 bugs

Review steps skipped before verdict1 person
Unverified guesses reported as fact27 people
Review approves on contributor claims1 person
PR review steps skipped1 person
False completion claims6 people
Review checklist steps skipped1 person
False review completion claims1 person
Verdict with uncited PR components1 person
Requirements silently narrowed4 people
Inferences stated as sourced facts3 people

Show all 24Show only the largest 10

Model skips required PR review steps but issues confident verdict1 person
Skipped review steps repeat1 person
Claims unsaved data was saved2 people
Partial testing reported as verified1 person
False step completion claims2 people
Status reports minimise known problems1 person
PRs assert unverified behaviour1 person
Agents report done with wording left1 person
Tasks reported done early1 person
Fix review omits remaining causes1 person
Skips test diff in PR review1 person
Unverified subagent claims in review1 person
Incomplete self-audit of compliance1 person
Partial memory file reads1 person

Not quite your bug?

Loaded rules ignored in reviews1 person

Original reports3, newest first

Nov 3, 2026Model accepts AI-generated pull requests after reading only the diff, missing security gaps in sibling code paths#106977
Nov 3, 2026Model accepts AI-generated pull requests after reading only the diff, missing security gaps in sibling code paths#106975
Oct 19, 2026PR reviews approved security-sensitive changes after confirmatory checks only; later adversarial pass found multiple auth bypasses#103572