diff --git a/.greptile/config.json b/.greptile/config.json
new file mode 100644
index 00000000..06f71e29
--- /dev/null
+++ b/.greptile/config.json
@@ -0,0 +1,5 @@
+{
+  "autoReview": ["open", "push", "rebase"],
+  "excludeAuthors": ["renovate[bot]"],
+  "ignorePatterns": "uv.lock"
+}
diff --git a/AGENTS.md b/AGENTS.md
index 7a497d89..159de2b0 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -61,8 +61,8 @@ in the `test` group or a narrow `# type: ignore[code]`, never `ignore_errors`.
 
 ## Before Merging
 
-Greptile reviews every pull request, and a green CI run says nothing about what it found. Read its
-review before merging:
+Greptile reviews every pull request except Renovate's, and a green CI run says nothing about what
+it found. Read its review before merging:
 
 ```bash
 gh api repos/dynamist/phabfive/pulls/<number>/comments --paginate --jq '.[] | "\(.path):\(.line) \(.body)"'
@@ -75,6 +75,8 @@ gh pr view <number> --comments   # the summary, with its confidence score and la
   thread why it does not apply
 - A finding often has siblings - the same mistake in another workflow or module. Look for them
   before calling it fixed
+- Renovate's pull requests are deliberately not reviewed (`excludeAuthors` in
+  `.greptile/config.json`), so CI alone decides those
 
 ## The Kubernetes Check Is Gated