Search papers, labs, and topics across Lattice.
This paper introduces TrustChain-Review, a novel framework that integrates blockchain technology and game-theoretic principles to enhance accountability in AI-assisted code reviews. By employing a risk-adaptive governance model, the framework strategically applies stronger oversight based on the expected benefits of code changes, thereby optimizing cost-efficiency while maintaining trustworthiness. Evaluation results show that while the full-evidence configuration yields superior trust and detection outcomes, the risk-adaptive approach offers a more practical solution for routine contributions with lower operational costs.
TrustChain-Review reveals that selective governance can balance trust and cost, making it feasible to maintain accountability in AI-assisted code reviews without overwhelming developers.
Context: AI-assisted software development can speed up coding and review, but it also makes accountability harder to establish. Developers may submit insufficiently verified code, reviewers may approve changes with limited inspection, and centralized reputation records may be difficult to audit. Objectives: This study introduces TrustChain-Review, a framework that combines verifiable evidence, strategic incentives, and risk-sensitive governance to support more trustworthy code review. Methods: The framework includes a blockchain-based evidence layer, a three-player game-theoretic model for developers, reviewers, and the platform, and a rule that applies stronger governance when the expected benefit justifies its cost. The evaluation uses a controlled simulation calibrated with the Diff Quality Estimation dataset. Six governance configurations are compared over 30 independent runs using reputation accuracy, trust convergence, malicious-review detection, superficial-review detection, net platform utility, governance cost, and cost-efficiency. Results: The full-evidence configuration produces the strongest reputation, trust, and detection results, but it also has the highest governance cost. The risk-adaptive configuration lowers this cost and improves cost-efficiency by applying stronger controls selectively, although its trust and detection results are lower than those of the full-evidence setting. Conclusion: Strong evidence-based governance is most appropriate for high-risk or audit-sensitive changes. For routine or lower-risk contributions, selective governance offers a more practical balance between trustworthiness and operational cost.