# Son of Anton

Son of Anton is a self-hosted GitHub pull-request review harness with configurable model providers and sandbox executors. Repository access and licensing are not yet public. The Cloudflare-native review engine and operator API currently live on separate, unmerged branches.

Use this index to choose the shortest path. Start with agent onboarding for an executable playbook, choose one deployment path, then read only the configuration and operating guides that path needs. Do not bypass the human access and credential gates.

## Start here
- [Agent onboarding](https://docs.anton-son.com/docs/getting-started/agent-onboarding.md): State probes, human prerequisites, and the installation playbook.
- [Introduction](https://docs.anton-son.com/docs/getting-started/introduction.md): Product scope and current limitations.
- [Cloudflare quickstart](https://docs.anton-son.com/docs/getting-started/quickstart-cloudflare.md): Deploy the native review engine.
- [Self-host quickstart](https://docs.anton-son.com/docs/getting-started/quickstart-self-host.md): Run the Node deployment.

## Product map
- [Anatomy of a review](https://docs.anton-son.com/docs/getting-started/anatomy-of-a-review.md): Follow a review from trigger to publication.
- [Architecture](https://docs.anton-son.com/docs/architecture/overview.md): Components and branch boundaries.
- [Validation and evidence](https://docs.anton-son.com/docs/code-review/validation-and-evidence.md): What runs and what counts as evidence.
- [Roadmap and flags](https://docs.anton-son.com/docs/reference/roadmap-and-flags.md): Default-off features and runtime limitations.

## Configure
- [Environment reference](https://docs.anton-son.com/docs/configuration/environment-reference.md): Real variable names and defaults.
- [Model providers](https://docs.anton-son.com/docs/configuration/model-providers.md): OpenRouter recommended; direct providers and Codex CLI alternatives.
- [Validation executors](https://docs.anton-son.com/docs/configuration/validation-executors.md): Select an isolated execution backend.
- [Secrets and keys](https://docs.anton-son.com/docs/self-host/secrets-and-keys.md): Credential placement and handling.

## Operate
- [Triggers and commands](https://docs.anton-son.com/docs/code-review/triggers-and-commands.md): Start and inspect reviews.
- [Operator API](https://docs.anton-son.com/docs/operator/operator-api.md): API on the separate operator-parity branch.
- [Observability and cost](https://docs.anton-son.com/docs/architecture/observability-and-cost.md): Logs, traces, and usage.
- [Troubleshooting](https://docs.anton-son.com/docs/reference/troubleshooting.md): Diagnose failures from source-backed signals.
- [Full documentation corpus](https://docs.anton-son.com/llms-full.txt): All pages in one response.

## Complete documentation index

# Son of Anton

- Getting started
  - [What is Son of Anton?](/docs/getting-started/introduction): Self-hosted GitHub PR review with configurable model providers, validation executors and review traces.
  - [Quickstart: Cloudflare](/docs/getting-started/quickstart-cloudflare): Prepare an authorized engine checkout, deploy the native runtime in shadow, then verify a live review.
  - [Quickstart: Self-host on Node](/docs/getting-started/quickstart-self-host): Run the webhook server and one-shot review worker with shared SQLite state, OpenRouter and a managed sandbox.
  - [Agent Onboarding](/docs/getting-started/agent-onboarding): Connect MCP v2 for agentic review operations and source-backed onboarding, with explicit credentials, human gates and evidence checks.
  - [Anatomy of a Review](/docs/getting-started/anatomy-of-a-review): Every section of a Son of Anton review body and check run, and what each one means.
- Code review
  - [Triggers and Commands](/docs/code-review/triggers-and-commands): What starts a review automatically, the @anton comment commands, and who is allowed to use them.
  - [Hypotheses and the Review Swarm](/docs/code-review/hypotheses-and-swarm): Optional, default-off hypothesis workers, planner behavior, result selection and the limits of evidence-label filtering.
  - [Context Graph](/docs/code-review/context-graph): The per-repo, per-commit graph of symbols, imports and references that gives the review blast radius beyond the diff.
  - [Validation and Evidence](/docs/code-review/validation-and-evidence): Sandbox validation, executor selection, skip conditions and the limits of optional artifact-backed evidence.
  - [Finding Evolution Across Pushes](/docs/code-review/finding-evolution): How findings are fingerprinted, deduped and classified as new, persisting, modified or resolved when the PR head changes.
  - [Learning, Memory and Priors](/docs/code-review/learning-and-priors): What finding outcomes and approved memory actually feed into later reviews, and which feedback paths remain incomplete.
  - [Model Inversion](/docs/code-review/model-inversion): Heuristic author-family detection and alternate review-model routing: built, default off, and not forwarded into native containers.
  - [Docs-only Fast Path](/docs/code-review/docs-only-fast-path): When docs-only or generated-only diffs skip validation, and the separate conditions for skipping a docs-only semantic review.
  - [Publish Modes and Rollout](/docs/code-review/publish-modes): Native shadow/live publication, policy gates, ledger boundaries and rollout precautions.
- Configuration
  - [Environment Reference](/docs/configuration/environment-reference): Review, validation, queue and operator environment settings, with code defaults and runtime-specific limits.
  - [Model Providers](/docs/configuration/model-providers): Configure OpenRouter as the review model provider, with OpenAI, Anthropic and Codex CLI as alternatives.
  - [Validation Executors](/docs/configuration/validation-executors): Choose and configure the sandbox that runs PR code: Crabbox, E2B, Cloudflare Sandbox or your own isolated executor.
  - [Repo Allowlist and Scoping](/docs/configuration/repo-allowlist-and-scoping): Repository enablement, branch and policy gates, manual-command authority, and token-scoping limits.
  - [Dashboard Settings Reference](/docs/configuration/dashboard-settings): Workspace review policy defaults, revisioned settings writes, and the limits of the operator-parity dashboard.
- Architecture
  - [Architecture Overview](/docs/architecture/overview): Review execution, persistence and publication, with the native engine and unmerged operator API kept separate.
  - [Cloudflare-native Runtime](/docs/architecture/cloudflare-native-runtime): Native Worker bindings, container state transport, configuration forwarding and recovery limits.
  - [Key Broker](/docs/architecture/key-broker): Separating the App private key from native review containers, without overstating the broker's authorization controls.
  - [Queue, Idempotency and Durability](/docs/architecture/queue-and-durability): Delivery deduplication, dispatch leases, uncertain publication and the limits of checkpoint recovery.
  - [Observability and Cost](/docs/architecture/observability-and-cost): Trace lifecycle, persistence failures and cost estimates without treating missing telemetry as zero spend.
  - [Security Model](/docs/architecture/security-model): Implemented isolation and authorization controls, with their scope and remaining trust assumptions.
- Operator
  - [Operator Dashboard](/docs/operator/dashboard): The parity dashboard, its backend requirements, and the separate read-only Node dashboard.
  - [Operator API](/docs/operator/operator-api): The unmerged parity Worker's route-specific auth, response envelopes, reports and mutation contracts.
  - [Test Lab](/docs/operator/test-lab): Comparing recorded validation lanes, with bounded samples, explicit unknowns and estimated spend.
  - [Cost and Traces](/docs/operator/cost-and-traces): Inspect parity trace details, distinguish missing telemetry from zero cost, and interpret bounded PR averages.
- Self-host
  - [Requirements](/docs/self-host/requirements): Source access, runtime, GitHub App, model, sandbox and infrastructure prerequisites for self-hosting.
  - [Run on a Node Box](/docs/self-host/run-on-a-node-box): Supervise the Node webhook server and one-shot worker with durable shared state and explicit access boundaries.
  - [Run on Your Cloudflare Account](/docs/self-host/run-on-your-cloudflare-account): Provision the native engine, enable a canary repository, separate publication authority and verify durable receipts.
  - [Secrets and Keys](/docs/self-host/secrets-and-keys): Credential ownership, branch-specific authentication, container forwarding and coordinated rotation.
  - [Upgrading](/docs/self-host/upgrading): Inspect schema compatibility, drain publication authority, apply guarded migrations and verify the new runtime.
- Reference
  - [Glossary](/docs/reference/glossary): Terms used across the docs, code and dashboard, each tied to the module that defines it.
  - [Review Output Schema](/docs/reference/review-output-schema): The JSON structure every semantic review must return, and how it maps to the posted review body.
  - [Comparison with Hosted Reviewers](/docs/reference/comparison-with-hosted-reviewers): A source-backed evaluation checklist: implemented paths, deployment boundaries, flag-off features and known gaps.
  - [Roadmap and Feature Flags](/docs/reference/roadmap-and-flags): Code-defined gates, actual default behavior, Cloudflare forwarding gaps and branch integration requirements.
  - [FAQ](/docs/reference/faq): Short, source-backed answers about providers, credentials, publication, runtime boundaries and recovery.
  - [Troubleshooting](/docs/reference/troubleshooting): Diagnose ingress, admission, model, sandbox, storage and publication failures using real error paths and guarded recovery.