Wrote a small tool called Diff Sniffer — flags any commit that's AI-authored, touches a path you've marked risky, and never got a human review. All three conditions or it says nothing. No AI in the tool itself, just trailers and path globs.
The part worth sharing here isn't the tool, though — it's that building the local-hook mode is what taught me git hooks exist at all. Post-commit, pre-push, whatever — you drop a script in .git/hooks/ and git just runs it. No config, no plugin API. A decade of daily git use and I'd never looked.
If anyone's further down this road than I am — better hook patterns, gotchas with pre-push vs post-commit for something like this — I'd take the pointers.
Full story + the actual tool: Coder B Dev Blog - I've use git ... / github.com/Coderb-dev/diffsniffer
Top comments (1)
Git hooks are one of those things that feel obvious after you discover them, but somehow many developers use Git daily without touching them.
I think tools like this will become much more important as AI agents start making larger changes. The challenge is no longer only generating code — it's creating reliable guardrails around what gets committed and shipped.