OpenCodeReview

A hybrid code-review system that combines deterministic diff selection and rule resolution with per-file agent review. Kevin's default reviewer remains Security and Review Skills; OpenCodeReview is the conditional coverage layer for large or heterogeneous diffs where every (path, status) must be accounted for. Source: alibaba/open-code-review commit 73c7f0f71445090cd0d31f7936394ea169ac3fd5, 2026-08-12

What the repository adds

The reviewed source separates deterministic engineering from model judgment. Workspace, commit, and range providers collect staged, unstaged, untracked, renamed, and deleted paths; a five-gate filter explains exclusions; rules resolve per path; then review runs per file. Delegation mode exposes only the deterministic half through ocr delegate preview --format json and ocr delegate rule --format json, leaving the host agent to inspect code and report findings. Source: pinned architecture and delegation skill

That separation closes a real gap in Kevin's review flow: a strong reviewer can still silently sample a large diff. The useful invariant is a coverage ledger, not a replacement model. Every previewed (path, status) ends as reviewed or skipped with a concrete reason, and the report carries total, reviewed, skipped, and coverage rate. Workspace identity includes status because deletion followed by untracked recreation can produce the same path twice. Source: pinned skills/open-code-review-delegate/SKILL.md

Route

Use Security and Review Skills normally. Add OpenCodeReview delegation when the change is large, spans many rule domains, contains substantial untracked work, or the request explicitly requires complete file coverage:

1. Freeze the review base and authority.
2. If a reviewed ocr binary is already available, run ocr delegate preview --format json in the target repository.
3. Preserve every previewed and excluded row in the coverage ledger; review in bounded rule/diff-size batches.
4. Resolve path rules with ocr delegate rule --format json; perform the actual Standards and Spec review through Security and Review Skills.
5. Refuse a clean result while any previewed row is unaccounted for.

Do not install the CLI merely because a routine review started. Global installation, provider credentials, telemetry configuration, comment publication, and automated fixes remain separate decisions. ocr review --preview is the no-token filter inspection route when the full CLI path is intentionally selected. Source: pinned CLI and telemetry documentation

Evidence and limits

At capture, the Apache-2.0 repository had 20,169 stars, 1,415 forks, 676 blobs, 13 selected test files, eight workflows, and four skill manifests. The maintainers report two years of internal Alibaba use and a 50-repository/200-PR benchmark with 1,505 ground-truth issues, higher precision/F1 than a generic Claude Code comparison, and much lower token use. Those benchmark numbers remain repository claims until their dataset and evaluation artifacts are independently reproduced; popularity and scale are not correctness proof. Source: frozen repository evidence, 2026-08-12

---

Timeline

• 2026-08-12 | Deep-reviewed the architecture, delegation contract, filters, rules, tests, CI, security, license, and local overlap. Added the optional deterministic coverage lane to Security and Review Skills and the versioned PR-review manifest without changing the default reviewer. Source: X bookmark 2084114545690423407; pinned repository evidence