Then just have the same AI bug checks for new PRs and automatically reject any that fail.

Isn’t that what everyone is doing with CodeRabbit?

No, is it necessary?