understand what you merge
The merge gate that checks comprehension, not code. Reckon blocks a pull request until a human explains, in their own words, the mechanism of what it changes. Any PR, whoever (or whatever) wrote it.
Reckon comprehension
pull #142 · add rate-limiter to auth
Reckon Review bot
In your own words: what does this change do, and why here? (the mechanism, not the diff)
you
It caps auth attempts per IP with a sliding window in Redis, so a stolen-credential bot can't brute-force logins. I put it in the auth middleware so every login path is covered, not just the form.
comprehension passed ✓