guide
self-hosted ai code review, on your server and your models
most ai review tools send your code to the vendor's servers, and offer self-hosting only on an enterprise contract. diff social is self-hosted from the start: one binary on your server, talking to the model provider you choose, or to none.
where your code goes
- diff social reads pull requests, commits and compares from github, through a github app with read-only access, or with a token for public repositories;
- the deterministic agents (flags, history, semantics) run on your server and send code nowhere;
- model work, such as ranking hunks or asking the reviewer and patcher agents, goes only to the model endpoint you configure: openrouter, any openai-compatible service, or a model you run yourself, such as ollama or vllm;
- with no model configured, the rest of diff social works and no code leaves your server.
what you run
| part | choices |
|---|---|
| the server | one binary, or one container; the web app is built in |
| rooms and accounts | redb on one box, or postgresql for more than one |
| models | openrouter, or any openai-compatible endpoint (vllm, ollama, litellm) |
| sign-in | workos with google and github sign-in, or any oidc provider |
| private code | a github app; each person sees a private repository only if their own github account can read it |
| hosting | a small server of your own, or google cloud run over cloud sql, scaling to zero |
a ceiling on every spend
paid model work is held against a monthly budget per team and per instance, both checked before the work starts and settled after it, so concurrent requests cannot overrun them. at the ceiling, work stops instead of running up a bill. guests can watch a room, but cannot start paid work. the server refuses to start with a model configured and no budget set.
private by default
an instance a team runs for itself asks search engines not to index it, unless it is configured to be public. rooms are never crawled, and a private repository's room answers anyone without access exactly as a missing repository does.
compared with hosted ai review
hosted tools are quicker to start: install an app and they comment on your next pull request. diff social asks you to run a server. in return your code stays where you put it, you choose the model, and the cost has a ceiling you set. see diff social as a coderabbit alternative for a closer comparison.
try it on a pull request
paste any public github pull request, commit or compare on the home page, and you are in its room.
open a room