Build1 publisher3 min readPublished
A team that interviewed more than 100 tech leads about AI-generated pull requests shipped per-viewer criticality tiers. Reviewers like the ordering and report awkwardness at declaring which files they skip.
The Engineer · Build desk

Compiled by The EngineerSomething wrong?How this is made
A path rule knows where a file lives and nothing more. The change map matches changed files against path rules to assign a criticality tier, and the tiers belong to the viewer rather than to the repository [9]. So a one-line change to a permission check that happens to sit in a low-tier directory sorts below the files the reviewer has already discarded [13]. Directory-shaped risk models have always had that hole. It widens when the diff came from an agent rather than from the person who chose the layout.
The tier counts in the post's own screenshot are worth converting. Fifty-four percent of the files on that pull request landed in the low tier, thirty percent in critical or high, and eleven percent in a bucket the rules could not classify at all [15][17][16]. The third figure is the adoption cost you can see from outside. Every unmatched path is a rule somebody writes, and rule sets rot at the rate the repository gets reorganised.
For the low-tier share to transfer to your repo, directory structure has to be a decent proxy for risk: tests kept out of logic, no shared helpers directory holding the rate limiter. A repo with that property probably already has reviewers who skim accurately by hand, which is what the interviewed seniors describe doing, reading the data model, the service contracts and anything touching money or identity first, and leaving helpers and tests until attention has gone [6][8]. One CTO wrote the sequence out in Slack: check nothing has been dumped into the data models, check the contracts between microservices are unmodified, then look at coherence and readability [7].
What the material does not contain is a measurement. The framing assertion is that nobody, at any skill level, can build a global understanding of a 2,000-line AI-generated PR touching 100 files [4], and that PR size grew significantly this year, with no figure attached [1]. The claim that removing the writing bottleneck moved it to review is one engineering manager's quote [3], in a post by the team building the review surface. The reported outcome of the change map is that users do like it [13], and the nearest thing to a time saving is a lead architect saying he can now see in a minute whether a PR touches critical files [12]. That is a claim about how attention gets allocated, not evidence about which defects got caught.
Reviewers also told the team they feel uncomfortable at first saying explicitly that they are not reading a file [13]. That discomfort is the most informative result here. The skim already existed; the tier list turns it into a stated decision, and stated decisions get argued about in a way that habits do not.
The number that would settle this is escaped defects by tier: bugs found after merge in files the reviewer discarded, against bugs found in files read closely. The available text ends before reporting anything like it [19]. A team running the change map for a quarter would have it.
Ranked by verification strength, evidence, and original report placement.
The post's evidence base is four months of interviews with more than 100 tech leads, architects and senior engineers on how their teams actually use AI, and every quote in the post is described as verbatim from those interviews.
The seniors interviewed already split reviews in two without doing it consciously: risky code is read first, every time, and for a backend reviewer that means the data model, the APIs, the contracts between services, auth, payments, and anything that touches money or identity.
One CTO sent the review order in a Slack message: "1. Check we haven't dumped [junk] into the data models. 2. Check we haven't modified contracts between micro-services 3. Then, once those parts are validated, I look at the coherence and readability of the code."
Boilerplate is skimmed over and gets the last part of the review, when the reviewer is already not really paying attention: helpers, tests, and connectors to a well-documented API.
The first thing the team built is a change map: every changed file gets a criticality tier, the tiers are set per viewer rather than per repo, and the assignment is done by matching file paths with rules.
Per the post, a backend reviewer marks the data model and the APIs critical and the frontend tests low, and a frontend reviewer flips the same PR the other way.
Follow any of these and your For You feed starts watching them — no settings page required.
Evidence-backed comparisons of source perspectives and observed adoption signals. Read the methodology
Which Builder, Operator, and Investor concerns the observed source mix emphasized—not a truth score.
Evidence, demonstrated adoption, hype gap, incentives, and confidence are assessed independently, each on its own current evidence. How these are measured.
One builder's own notebook
Everything traces to a single dev.to post written by the people selling the review tool: an interview set they ran themselves, quotes attributed only by job title, and one screenshot. The tier arithmetic on that 93-file pull request is the only thing a reader can check independently, and the piece breaks off mid-sentence before it finishes the argument it announced.
Shipped, uncounted
The ordering and triage are live rather than sketched, and the return of the alphabetical tree is a genuine usage signal: people used it, disliked losing the navigation they knew, and got it back. Past that there is no count of teams, repositories or reviewers, no named customer, and reception is a sentence written by the vendor.
Restrained pitch, thin footing
For a post about its own product this is unusually modest: it names the failure mode path rules cannot catch and claims no quality gain at all. The overreach sits underneath, in a premise that pull requests 'grew significantly this year' with no number attached, and in one screenshot standing in for how much of an agent-written diff a reviewer would be waving through.
Author sells the surface
The research, the diagnosis and the remedy belong to one party, and the remedy is a product. The interviews are the team's own, cited back to their earlier post, and no interviewee is identified, so nobody can be asked whether the two-pass reading habit was really theirs or was fitted to a roadmap that already had tiers in it.
Solid on mechanics, blind past them
What shipped and what the screenshot counts can be read straight off the page, so the mechanism is firm ground. The human material around it — interview scope, reviewer sentiment, growth in change size — rests on one interested account with no second witness, which is where our reading has to stop.
build
AI-written code fails the same four ways, and every gate you own reports green1 publisher
build
DOMPurify's svg profile strips the foreignObject carrying Mermaid labels in four of five diagram types1 publisher
build
Copilot's credit meter moves the cost decision into the model dropdown1 publisher
build
A cost monitor overcounted 4.9x, then went dark for a week when set -e did its job1 publisher
Publishers with included, body-backed reporting in this cluster.
1 article · September 8, 2026