AI-generated codebases that passed CI and still aren’t production
Paid audit of Cursor/Claude-shipped repos → production-ready on security, evals, cost, and observability. Built for B2B SaaS founders and engineering leads.
The offer
A 5-day paid discovery that surfaces what will break in production — then an optional 30-day remediation retainer to fix it with you. This is senior, hands-on review — not junior vibe-coding tickets.
What I inspect
- Secrets and credential hygiene in AI-generated diffs
- RAG / agents shipping without evals or failure modes
- Tool permissions and blast radius of agent actions
- Token cost, caching, and runaway usage paths
- Vibe-coded auth, tenancy, and authorization gaps
About
20+ years building software. Ex-CTO. Senior engineer @ PayPal. Independent consulting — not affiliated with my employer.