Review an AI-generated change safely

Practice provider setup, scoped consent, candidate review and recovery in a disposable project.

Step 1Create a disposable baseline#

Use a copy of HelloForms and commit it. Do not use a project containing private records, credentials or unreviewed files for this exercise. Read the AI status and boundaries first.

Step 2Configure the provider you intend to use#

Open AI Provider Settings and set Apply AI changes: Ask me first for this review exercise; the default applies checked changes automatically with Undo. Leave automatic plugin/migration approval off. For external Codex, select an existing installation or use Autodetect Codex, then grant access through the system chooser if requested. Configure the generation model separately. For a local provider, use the configured local model endpoint.

Step 3Request one bounded change#

Use this prompt and review the document scope before agreeing to share source:

Practice prompt

In the HelloForms project, change only the greeting behavior on frmMain.
Trim the entered name. Reject an empty or whitespace-only name.
For a valid name, display "Welcome, " followed by the trimmed name.
Keep the control names, layout, second Form and package references unchanged.
Propose complete handlers and explain the acceptance tests.

Step 4Read the complete candidate#

Check that the plan changes only the intended Form. Inspect the entire handler, event binding and diff. Reject unrelated package references, migrations, files or network calls. Run the candidate Check offered by the workflow.

Step 5Exercise rejection before acceptance#

Reject the first candidate and inspect the project. Confirm the source remains unchanged. Repeat the same bounded request only if you want to apply it, then approve the exact reviewed diff.

Step 6Verify the result and recovery#

Run Check and test an empty input, spaces and Ada. Inspect the Git diff. Exercise Undo on the applied change if available, confirm recovery, then reapply only after review. Stop or provider failure must not be reported as an applied result.

Source baseline 20f4bfed6b · Build manifest