How the Claude Code team does code review

The Claude Code team describes its layered code review flow, in which most reading is done by machines and human attention is reserved for risk-based approval. From June to September, merged pull requests to the Claude Code codebase more than doubled while the share that had to be reverted fell by more than 40 percent. The process stacks verification before the PR, required CI, Claude review, security review, risk-tiered human approval and a merge queue with flags and fast rollback, and the team turned past incidents into a daily eval set for the reviewer.