Vibe Coding playbook/Module 7 · Guardrails & security

Day 63 / 100 · Guardrails & security

Read the red and the green.

A diff shows every line added (green) and removed (red). You don't need to understand every line. You need to spot the ones that shouldn't be there.

A Diff Worth Stopping For
  function saveLeave(user, dates) {
-   if (!user.canApprove) return deny();
+   // if (!user.canApprove) return deny();
+   // TODO: re-enable after testing
    return store(dates);
  }

Stop and ask when you see

Files you didn't expect to change

Deleted or skipped tests

Security checks commented out

New packages or network calls

Anything near .env or keys

Large deletions

Summaries tell stories. Diffs tell the truth.