Most engineering teams that ship AI-assisted code have an informal process — "we review it like any other PR" — and no written policy. That gap matters the moment an auditor asks for your AI code review procedure, or the moment a hallucinated API import ships to production because no gate caught it.

This post is a working template. It covers four...