Anatomy of a Swamp PR

Agents open PRs in our repo. Other agents review them. That means untrusted input flowing through models with merge authority — so we built a pipeline with four independent AI reviews, scoped tools, and a security review that watches the reviewers.