Ten checks before anything goes live.
Run through this before any vibe-coded tool reaches real users or real data. Ask the agent to check each one, then check its answers.
No secrets in code or history
Leaked keys revoked and replaced
Deny rules for .env and pushes
Every diff read before commit
Packages checked and audited
Only the personal data you need
All input checked on the server
Permissions checked on every request
Backups restored at least once
A fresh-session security review
Check before live. Every time.