dunder · mifflin

The Dundie
Loop

Automation as a branch teams opt into — not a tax they carry.

$
Slack App · dundie-loop
Handler #1 · Dwight review
02 / 03
dundie-loop · review-v2-test.js
function listShredder(userInput) {
return execSync(`shred -v ${userInput}`)
}
[critical] Command injection

Untrusted input reaches a shell. Use the argv form so no shell is involved:

Suggested change · one clickexecFileSync("shred", ["-v", userInput])
The first product

A review that fixes, not just flags.

◎

Inline, on the exact line

Findings land where they belong — not one wall-of-text memo.

⚡

One-click suggestions

A "Commit suggestion" button, not a copy-paste snippet.

↻

Context-aware re-review

Never duplicates a comment. Reads your replies. Respects "won't fix".

Safety, by Dwight
03 / 03

Because the logic is central,
so are the guardrails.

gate

Opt-in, fail-closed

A branch runs a handler only when enrolled. One kill switch pulls it out instantly.

canary

Ramp by percentage

A new handler rolls out predictably across Scranton before it's on everywhere.

usage alerts

Never blocks — always warns

Runs hot? Dwight gets an alert. Reviews keep flowing; nobody's silently capped.

trust

Fork boundary

Fork PRs can't inject their own review config. One implementation, enforced for all.

← → / space · press E to edit
← Showcase