AI evaluation
Code Review Arena
A benchmark that checks the patch, not just the critique.
Code Review Arena scores bug detection and repair separately, then applies each patch and runs the required tests and validators.
The problem
Finding the bug is only half the job.
Code-review benchmarks often stop after bug detection. That makes a convincing explanation look successful even when the proposed patch does not apply or breaks the test suite.
What I built
A benchmark that executes the patch.
I built the benchmark runner, scoring pipeline, isolated patch execution, versioned case packs, API, and dashboard. Detection and repair receive separate scores.
How it works
The main path.
- 01
Give the reviewer a bounded diff and file set without the seeded answer or pre-patch test output.
- 02
Score the reported finding independently from the proposed repair.
- 03
Apply the patch in an isolated workspace with protected paths.
- 04
Run the required tests and structural validators.
- 05
Save the pack checksum, configuration, timings, and per-case result in the run record.
Key engineering decisions
Three decisions that matter.
Separate detection from repair
A reviewer can receive credit for finding the defect without receiving credit for a patch that does not apply or pass the required checks.
arena/scoring/ · arena/benchmark/benchmark_runner.pyProtect the benchmark
Reviewer payloads omit answer-bearing metadata, while protected paths and pack hashes make obvious benchmark tampering visible.
arena/benchmark/ · arena/patching/ · arena/execution/Keep every result inspectable
Reports retain the harness revision, pack checksum, reviewer configuration, budgets, timings, and repair diagnostics.
arena/reports/ · arena/storage/Results
Selected outcomes.
Benchmarks, packages, and checks from the project.
detection / validated repair
In the 10-case run, keyword-gamer found every defect but repaired none. The reference patches passed all 10 cases.
Benchmark results ↗versioned benchmark cases
The repository ships three ten-case packs, including two patch-backed audit packs.
benchmark_sets/ manifests ↗platform and execution checks
The committed workflow exercises the backend, package, dashboard, platform-safety, and Docker execution paths.
GitHub Actions ↗Interactive demo
Try the main path.
Pick a case and reviewer. Run the patch through tests, validators, and repair scoring.
Controls
Benchmark replay
security_fastapi_multitenant_admin_bypass_001- 01Finding
Waiting
- 02Patch apply
Waiting
- 03Regression tests
Waiting
- 04Structural validator
Waiting
- 05Validated repair
Waiting
Scope
Current constraints.
- The case packs are curated and small, so results are limited to these benchmark scenarios.
- Structural validators are case-specific; the required tests remain the primary repair gate.
- Current adapters cover deterministic controls and external reviewers; there is no production-model leaderboard.