I built a local-first security gate to stop "Vibe Coding" from breaking production

Avenassh A.S — Tue, 23 Jun 2026 14:28:32 +0000

We all love the speed of "vibe coding." Generating an entire feature in 20 minutes with an AI agent feels like magic. But there is a silent, dangerous bottleneck: architectural drift.

AI agents are excellent at generating code that looks right, but they frequently hallucinate structural flaws—silently skipping a critical Supabase Row-Level Security (RLS) policy, breaking tenant isolation, or hardcoding secrets.

The Problem
When you let AI write your code, the hard part of software engineering (the 99.5% that isn't the prototype) often gets skipped. I got tired of manually auditing my own AI-generated PRs, so I decided to build a "senior engineer in the loop."

Introducing PreFlight
I built PreFlight, a local-first security gate that runs in your development environment. Instead of relying on a prompt-based "check," it uses Tree-sitter AST parsing to scan your code structures on every file save.

Local-First: It doesn't send your code to a third-party server, respecting your privacy and project security.

Structural Awareness: It understands the Abstract Syntax Tree (AST) of your project, meaning it can detect if a database query is missing a required security policy before you ever commit.

The "Hard Block": When it catches a flaw, it throws a hard error in your CLI, effectively acting as an automated gatekeeper.

Why I'm doing this
I’m a physician and a developer. In medicine, we are trained to use rigorous triage and safety protocols to prevent errors before they become critical. I wanted to bring that same clinical precision to the AI-coding workflow.

PreFlight is currently in its Beta v1. If you're interested in the intersection of AI, static analysis, and security, I’d love for you to try it out and give me your brutal feedback.

Check out the repo and installation guide here: https://github.com/av29nassh-sketch/PreFlight
https://preflight-vibe.vercel.app/

Support the Product Hunt Launch here: https://www.producthunt.com/products/preflight-5?launch=preflight-f5be345c-7d68-4f12-94bb-f6a35989fe27

I'm looking for engineers who want to push this engine to its limits. Let me know what you think!

ai #security #webdev #opensource #buildinpublic

DEV Community: Avenassh A.S

I built a local-first security gate to stop "Vibe Coding" from breaking production

ai #security #webdev #opensource #buildinpublic