diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 21075797c8c8f766ef105904ef6ff69f32036d90..f7ee8111bfa5e726b6ef8ff68c5ce7292043b3ef 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -12,12 +12,16 @@ variables:
 stages:
   - auto-merge-main
   - build
+  - ai-review
   - publish
 
 include:
   - project: "e/templates"
     ref: main
     file: "/.gitlab/gitlab-ci/gitlab-ci-auto-merge-main.yml"
+  - project: "e/os/ai-review"
+    ref: main
+    file: ".gitlab-ci.yml"
 
 auto_merge_main:
   extends: .auto-merge-main
@@ -31,15 +35,21 @@ before_script:
 
 .rules_merge_request_ref:
   rules: &rules_merge_request_ref
-    - if: "$CI_COMMIT_BRANCH && $CI_OPEN_MERGE_REQUESTS"
+    - if: '$CI_PIPELINE_SOURCE == "push" && $CI_COMMIT_BRANCH && $CI_OPEN_MERGE_REQUESTS'
       when: never
     - when: always
 
 .rules_protected_ref:
   rules: &rules_protected_ref
+    - if: '$CI_PIPELINE_SOURCE == "push" && $CI_COMMIT_BRANCH && $CI_OPEN_MERGE_REQUESTS'
+      when: never
     - if: '$CI_COMMIT_REF_PROTECTED == "true"'
       when: always
-    - if: "$CI_COMMIT_BRANCH && $CI_OPEN_MERGE_REQUESTS"
+    - when: manual
+
+.rules_manual_ref:
+  rules: &rules_manual_ref
+    - if: '$CI_PIPELINE_SOURCE == "push" && $CI_COMMIT_BRANCH && $CI_OPEN_MERGE_REQUESTS'
       when: never
     - when: manual
 
@@ -83,6 +93,7 @@ before_script:
 
 build-release:
   extends: .build
+  rules: *rules_protected_ref
   allow_failure: false
   cache:
     key: ${CI_PROJECT_ID}
@@ -121,7 +132,7 @@ build-debug:
 
 generate-apks:
   stage: build
-  rules: *rules_protected_ref
+  rules: *rules_manual_ref
   allow_failure: true
   needs:
     - job: build-release