Catch the Bugs Your Code Review Misses - Killian Carlsen-Phelan & Taylor Luttrell-Williams, Sonar

In this hands-on session, Killian Carlsen-Phelan and Taylor Luttrell-Williams of Sonar set up Gitar, a code change verification agent, on a sample ticketing app and run three pull requests through it. Gitar catches a bug that isn't in the diff at all (a buyer can refund a ticket after giving it to a friend), enforces a business rule from a project config (show customers the all-in price), then diagnoses a failing CI test and keeps pushing fixes until the PR passes and auto-merges. They close with functional validation against Jira tickets, learned conventions, and cross-repo and cross-PR analysis. Chapters: 0:00 Intro 0:39 Setup: free trial and workshop repo 4:19 Who verifies agent-written code? 6:46 What Gitar does 10:30 Hands-on: fork the repo 12:43 The Box Office demo app 15:43 PR 1: A bug hiding outside the diff 20:08 One-click fixes 22:07 PR 2: Teaching it your business rules 26:36 PR 3: CI failure diagnosis and auto-merge 33:24 Advanced: cross-repo and cross-PR analysis 36:54 Q&A Killian Carlsen-Phelan Taylor Luttrell-Williams https://www.sonarsource.com Join us in SF for the second annual AIE CODE summit: https://aie.codes our last flagship summit of 2026. Applications live now!