Skip to main content
Diffraction’s hosted review entry point is a GitHub App. Access is scoped to the repositories selected during installation.

​
Before installation

The operator must configure the deployment’s public URL, identity provider, GitHub App, evidence storage, trusted sandbox harness, and production models. The repository’s deployment runbook and GitHub App setup guide cover those steps. They are operator references, not an assertion that hosted reviews are already available.

​
Install for your workspace

  1. Sign in to the configured Diffraction deployment.
  2. Open its /install page to start installation with signed workspace state.
  3. Select the repositories that Diffraction should review.
  4. Complete GitHub authorization and return to Diffraction.
  5. Add repository configuration to the selected project.
Start from Diffraction so the callback can associate the installation with the authenticated workspace. Installation access is verified through GitHub before the connection is persisted.

​
Permissions and events

The Diffraction App requests read access to contents and metadata, plus read/write access to Checks and pull requests to publish review results. Installation credentials remain outside the untrusted application sandbox. Pull request actions opened, reopened, synchronize, and ready_for_review enter review intake. Diffraction verifies the revision and evaluates whether the change can affect the UI before proceeding. The production path updates a Check and summary with links to authenticated review evidence.