Sentinel runs a local credential and security-pattern scan on merge request diffs. It looks for common credential markers and high-risk patterns, then records a security flag and confidence score on the request.

It is a fast first-pass check, not a model-backed AI code review. Human review, testing and security assessment are still required before merging.