Learn VibeGuard: from zero to expert, then sell it
No AI background needed. Five levels, each with something to actually do, at your own pace. Tick items as you go (your ticks stay in this browser).
Evidence, proof and selling tools for VibeGuard
Level 1 Beginner: understand it
"Vibe coding" means building software by asking an AI and accepting what it writes. It is fast, and it has typical failure patterns: importing packages that do not exist (attackers register those names), misspelled lookalike packages, errors silently swallowed, random numbers presented as scores, and the usual security holes.
VibeGuard checks for those patterns in Python, with rules (no AI judge). An AI can then propose a repair, but VibeGuard signs it only if the repaired code is clean, keeps every function, and adds no new capability (for example, no new network access).
Think of it like this: A spell-checker and a fact-checker for AI-written code, and an editor who refuses any "fix" that sneaks in new content.
Read the full plain-English explanation: VibeGuard, explained.
Level 2 User: see it work
Run it live: open the live demo. Before each result, guess what will happen. These are checks it must pass:
- Sample: Slingshot Hallucinated Package (Cursor / Windsurf AI diff): AI-written Python checked by syntax tree and the supply-chain guard.
- Sample: Fabricated Confidence Metric (Mock-dressed-as-computation): AI-written Python checked by syntax tree and the supply-chain guard.
- Sample: Clean Standard-Library HMAC Token Verifier: AI-written Python checked by syntax tree and the supply-chain guard.
- Your code: random number as a risk score: A fake measurement looks like a real one.
- Your code: swallowed error in auth: Errors hidden with pass.
- Your code: plain arithmetic: Ordinary code passes.
Level 3 Verifier: prove it yourself
This is the skill that sets you apart: you don't have to believe us, and neither do your customers.
- Install Python 3 if you don't have it (python.org/downloads).
- Download the kit and unzip it.
- Open a terminal in that folder. On Windows, click the folder's address bar, type
cmdand press Enter. On a Mac, right-click the folder and choose New Terminal at Folder. - Run
python3 verify.py(on Windows,python verify.py). It checks the seal without the internet. - Run
python3 verify.py --live. It repeats every check from your own computer. - Try to cheat it: open
transcript.jsonin a text editor, change one character, save, and runpython3 verify.pyagain. It must now say FAIL. Unzip a fresh copy afterward.
Level 4 Expert: know the edges
An expert knows what a product does not do, and says it first. That is what makes a buyer trust you.
Read its limits page in full: what VibeGuard does not do.
You can say
- Rules, not an AI, decide.
- Repairs signed only if clean, complete, and adding no capability.
Never say
- "Keeps behaviour identical": keeping names does not prove behaviour.
- "Runtime tested": static only.
Read the questions real buyers send, with honest answers: answers to buyer questions.
Test yourself (click a question to see the answer)
Who decides if a repair is signed?
The rules.
Language?
Python.
In the live check "Sample: Slingshot Hallucinated Package (Cursor / Windsurf AI diff)", what answer must come back, and why?
"POISONED_DIFF", "UNSAFE_DIFF". AI-written Python checked by syntax tree and the supply-chain guard.
In the live check "Sample: Fabricated Confidence Metric (Mock-dressed-as-computation)", what answer must come back, and why?
"POISONED_DIFF", "UNSAFE_DIFF". AI-written Python checked by syntax tree and the supply-chain guard.
In the live check "Your code: random number as a risk score", what answer must come back, and why?
"UNSAFE_DIFF", "POISONED_DIFF". A fake measurement looks like a real one.
Does a passing kit prove the product is safe for every possible input?
No. It proves what the live product answered to the inputs listed in the kit, and lets anyone check that again.
Has an independent party audited or certified this product?
No. No third-party audit is complete and no certification is held. Say so if asked.
Want a formal study path? The CAIN Academy has courses and exams. Finishing this page is your own practice; it is not a qualification or certification.
Level 5 Seller: put it in front of a customer
- Copy, paste, send: the shortest route, no technical skill needed.
- Who buys it and where to find them.
- The sales conversation, then the offer and the close.
- The rules: read these before your first message.
- Selling tools with this product's evidence built in: pitch, emails, call script, objection answers, one-pager.
About money: your share is agreed in writing with FIRME AI CORPORATION before your first message (email vincent@firmeai.com). Nothing here promises income. Most messages get no reply; that is normal.