cd /news/artificial-intelligence/from-who-wrote-this-to-provenance-ac… · home topics artificial-intelligence article
[ARTICLE · art-17286] src=dev.to pub= topic=artificial-intelligence verified=true sentiment=↑ positive

From "Who Wrote This?" to "Provenance, Actioned": Making AI-origin code obvious during review

LineageLens has introduced actionable provenance features that surface AI-generated code context directly in code reviews, including sidebar captures, drag-and-drop insertion, and a confidence engine. The system provides reviewers with immediate access to the original prompt, model, and confidence score for any AI-produced code block, enabling triage in under five minutes instead of 30 to 120. By replacing archival audit logs with inline, one-click actions, the tool aims to reduce reverts and shorten review cycles.

read3 min publishedMay 29, 2026

TL;DR: The most useful provenance is actionable provenance. Instead of storing prompts like a dusty audit log, surface them where decision-makers work: the code review. Recent UX and correlation work in LineageLens — sidebar captures, drag/drop, click-to-insert, and a confidence engine — demonstrate how provenance can shorten review cycles and reduce reverts.

The problem (why it matters) By 2026, AI is a first-class development tool. Good suggestions become accepted edits, then commits. When reviewers see unfamiliar code they ask the obvious questions: who wrote this, why was it accepted, and was it audited? Git blame shows an author, but not the conversational context that generated the code. That missing context causes three predictable costs:

Time to reproduce: reviewers re-run prompts or attempt to reproduce edits.

Conservative reverts: unknown edits get reverted, losing useful fixes.

Risk hiding: sensitive changes slip through without proper checks.

What "actionable provenance" looks like

Actionable provenance answers reviewer questions immediately:

Who/what produced this block (adapter + model)

The original prompt text

Confidence that the prompt maps to the inserted code

Quick actions: insert into the editor, copy prompt to PR comment, or open the capturing session

Minimal latency, clear UI, and one-click actions are the difference between “archival” and “actionable”.

Recent product signals that make it practical (evidence from the repo)

Drag-and-drop + click-to-insert (sidebar improvements): let reviewers place the original generated block into a temporary editor buffer or paste the prompt into the PR comment box.

Confidence engine and dynamic routing: correlation scores and better adapter matching reduce false positives so reviewers can rely on the provenance instead of treating it as noise.

UX fixes (trash/clear buttons, reorder, inline hover actions): small changes that keep the capture panel usable during real reviews.

See the architecture summary in the repo: architecture.md:1 and the product README (README.md:1). Concrete workflow: a reviewer’s day with actionable provenance

PR opens. Reviewer scans diffs.

A capture badge is shown next to changed hunks indicating "Provenance: available — confidence 88%".

Click: the capture sidebar opens to the exact prompt, model, and surrounding context snapshot.

Action buttons:

"Insert at cursor" — drop the generated block into a temp editor to run tests locally.

"Copy prompt" — paste into a PR comment template to ask follow-ups.

"Annotate PR" — append an auto-formatted provenance note (prompt, model, confidence).

Outcome: reviewer spends <5 minutes to triage instead of 30–120.

UX trade-offs and governance constraints

Confidence thresholds: too low → noisy provenance, too high → missed attributions. Tune by starting conservative (show medium/high only) and lower threshold based on false-negative feedback.

Privacy and storage: prompts can be sensitive. Default to workspace-local storage and make PR annotation an explicit reviewer action.

Reviewer training: a short guideline (one paragraph) in your PR template — "If provenance shows 'high confidence', prefer triage over revert" — makes a measurable difference.

Quick checklist to evaluate your team's readiness

Are prompts stored in your control plane or vendor logs? If not, you may lack necessary evidence.

Can you surface provenance inline in PRs or via your editor? If not, archival logs won't help reviewers.

Do you have a workflow for annotating PRs with provenance? If not, create a two-line PR template snippet now.

── more in #artificial-intelligence 4 stories · sorted by recency
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
Live at https://your-agent.zahid.host
Get free account → Pricing
from €0/mo · no card required
LIVE [news/from-who-wrote-this-…] indexed:0 read:3min 2026-05-29 ·