CodeRabbit launches risk-based auto-approvals

Risk-based approvals are a practical way to reduce reviewer fatigue as AI-generated pull requests multiply, but the safety boundary depends on accurate risk classification and carefully maintained policies.

• –`max_merge_risk: low` automates routine changes while routing riskier work to humans.
• –Path overrides provide an important guardrail for authentication and other security-sensitive code.
• –Teams should pair approvals with CI, branch protection, and CODEOWNERS rather than treating approval as proof of correctness.
• –Auto-approved changes still need sampling and audit, since a low-risk label can miss indirect or context-dependent failures.