Andrew Finch

Andrew Finch is a staff software engineer at Sonar working on automated code review. At Gitar, he wrote an access check that correctly blocked free-tier users from running a premium command, and Gitar’s reviewer caught a bug in it anyway. When the command arrived through one webhook, the user got no reply. Spotting the missing reply in Andrew’s pull request meant following the request past the point where the code had made the right decision.

Building software for drivers and clinicians

From February 2017 to July 2018, Andrew was a senior software engineer on Uber’s Driver Trip Experience team. He worked on navigation and map interactions in the iOS driver app, including how drivers found their way during a trip. He also worked on charging for time a driver spent waiting and contributed to the team’s rewrite of the app using Uber’s RIBs architecture.

At Forward, where he was a staff software engineer from August 2018 to July 2024, Andrew built services that collected and processed members’ health data. He also helped build the tools clinicians used on the other side of those services to review a member’s data and order labs or medication. For the engineers developing those applications, he defined the charter for the App Development Platform team and its software development kit.

The driver app had to account for a driver’s wait. Forward’s tools had to carry a member’s data far enough for a clinician to act on it. Andrew’s webhook bug illustrates the same question on a smaller scale. Once the access check had done its job, what would the person who typed the command see?

One logging rule across three failure paths

For Gitar’s web app, Andrew wrote a Markdown rule for client-side error logging. A client component should call logError when it handles a failure. A lint rule looking for catch blocks could recognize a component handling an exception, but it would miss a server action that returned an error as its result or a failed fetch handled in a callback. Andrew put the requirement in the repository in plain language so Gitar’s reviewer could apply one instruction to all three paths.

Sonar acquired Gitar in May 2026. Andrew’s work on verification extends beyond individual pull requests. As code generation increases the volume of changes people have to review, he argues for checking software at several stages of development.