From review to repair

How a review finding becomes a safe repair: the Sigilix workflow that carries anchors, evidence, memory, and verification from finding to verified fix.

TL;DR

A product note on why review findings need enough proof, memory, and verification to become safe repair work.

A review finding is not the end of the workflow. It is the beginning of a decision: fix this, dismiss it, ask for more proof, or turn it into a repair task.

That handoff is where many AI systems become brittle. A reviewer can sound convincing, but a repair agent still has to understand the local code path, the rule being protected, and the evidence that made the finding real.

Sigilix treats review and repair as one system. The finding should carry enough context that the next model path does not have to rediscover the bug from scratch or guess around the repository's memory.

Repair needs better inputs than a comment.

A vague finding forces the engineer or agent to rediscover the issue before fixing it. A grounded finding carries the file, line, reason, evidence, and expected behavior.

That is the difference between a comment that sounds smart and a review that can become useful repair work.

The repair path needs the claim and the proof. It needs to know whether the issue is a failing invariant, a missing tenant check, a stale assumption, a race, a forgotten test, or a product rule that lives outside the changed file.

Without that structure, the repair model is pushed toward generic code editing. It may make the diff smaller, but it can also erase the constraint that made the original finding important.

The model needs the same evidence the reviewer used.

A repair agent should not receive only the final review sentence. It should receive the anchor, the relevant surrounding code, the execution or static evidence, and the memory that explains why the issue matters in this repository.

That is especially important when the repository context conflicts with a model's general prior. A generic model may expect one architecture, one naming convention, or one normal way to handle an error. The local system may intentionally do something else.

The repair path has to preserve that local meaning. Sigilix's own models are tuned to treat repository memory and code evidence as part of the repair contract, not as decorative context.

Memory should narrow the repair.

Memory is useful when it removes ambiguity. It can tell the repair path that a helper is shared across worker routes, that a test fixture mirrors production behavior, or that a prior reviewer dismissed a similar pattern because the code was unreachable.

It is not useful when it becomes a pile of context the model can cherry-pick from. The system has to retrieve the memory that matters, connect it to the current code, and make the model justify the repair against that evidence.

That is why Bring Your Own Key (BYOK) is not a complete substitute here. A local external model can edit code, but it may not obey Sigilix memory the same way a Sigilix route does when memory and parametric knowledge disagree.

Verification belongs before confidence.

When Sigilix can verify a claim, the repair path is clearer. When it cannot, the system should say so. The point is not to sound certain. The point is to earn certainty where the evidence supports it.

That means the repair loop needs a way to check itself: tests, static analysis, deterministic receipts, or narrow reasoning tied to the actual code path. A model should not call a patch safe because it reads cleanly.

The better the original review evidence, the easier this becomes. A finding that names the failing behavior can produce a regression test. A finding that names the invariant can guide the patch. A finding that names uncertainty can stop the repair from pretending it is proven.

Repair is a workflow, not a generated patch.

The product line from review to repair is not one button. It is a sequence: find, prove, route, repair, verify, and explain. Each step should reduce uncertainty rather than move it to the next person.

That is why Sigilix is built across review, triage, CLI, chat, and memory. The review needs to become an action without losing the proof that made it believable.

The review quality repair inherits
Recall, all planted bugs84%
Precision, hand-audited91%
False-positive rate, lower is better9%
Repair starts from the finding, so the reviewer's numbers bound what repair can safely act on. Measured on our own hand-built, twice-verified e2e bake-off fixture, scored with repeated runs and a human audit of unmatched findings; these figures come from our own fixture and are not a same-fixture comparison against other vendors.

Where the handoff works, and where it does not

Where this helps

  • A grounded finding carries the file, line, reason, evidence, and expected behavior, so the repair path does not have to rediscover the bug before fixing it.
  • Memory narrows the repair by naming the constraint that made the finding matter, which keeps a patch from solving the wrong version of the problem.
  • When a claim can be checked with tests, static analysis, or deterministic receipts, confidence is earned rather than asserted.

Where it does not

  • Verification does not cover every change. When Sigilix cannot verify a claim, it should say so rather than call a patch safe because it reads cleanly.
  • Repair quality is bounded by review quality. A vague finding still forces rediscovery, and no repair model recovers a constraint the review never named.
  • BYOK can edit code, but it may not obey Sigilix memory the way a Sigilix route does when memory and parametric knowledge disagree. That is why the core review, triage, research, and repair paths run on our own tuned models.

See it in practice

Review

The finding is where repair begins: the file, the line, the reason, and the evidence that made the issue real rather than plausible.

CLI

The repair loop needs a way to check itself. The CLI is where a patch meets tests, command output, and what actually passed or failed on the machine.

Triage

Not every finding should become a patch. Triage is where a finding is routed, dismissed, or turned into work that someone owns.

Review accuracy at scale

The numbers repair inherits, including the 9% of audited findings that should not have been posted at all.

What comes next

The path from review to repair is where believability becomes practical: fewer guesses, stronger memory, and more grounded next steps.

Frequently asked questions

Why treat review and repair as one system?
Because a review finding is only useful if repair can trust it. If the finding carries the file, line, reason, evidence, and expected behavior, the next model path does not have to rediscover the bug from scratch or guess around the repository's memory.
What does a repair agent need beyond the review comment?
It should receive the anchor, the relevant surrounding code, the execution or static evidence, and the memory that explains why the issue matters in this repository, not just the final review sentence, so it does not erase the constraint that made the finding important.
Where does verification fit?
Before confidence. When Sigilix can verify a claim with tests, static analysis, or deterministic receipts, the repair path is clearer; when it cannot, the system should say so. A patch should not be called safe just because it reads cleanly.
Can I use my own model (BYOK) for repair?
A local external model can edit code, but it may not obey Sigilix memory the same way a Sigilix route does when memory and parametric knowledge disagree. That boundary is why the core review, triage, research, and repair paths run on our own tuned models.

Sources and further reading