VIBEGUARD KEYSTONE: review the code your AI assistant just wrote

Cursor, Copilot and Claude Code write code fast, and some of it imports a package that does not exist (someone can register it), hides errors with except: pass, or returns random.random() as a "confidence score". VIBEGUARD reads the code's syntax tree, checks every import with CAIN-42's supply-chain guard, and looks for the vulnerabilities assistants actually write. A repair is signed only when the re-scan is clean, every function is still there and nothing new can start processes or reach the network.

#18 of the CAIN-42 Top 25 9 gaps found and fixed today live after the next gateway deploy

3/12

held on today's blind set, before any change

12/12

hold on the fixed engine

false alarms on 5 ordinary patterns

models in the verdict (Claude only proposes the repair)

Try it

The homepage section KEYSTONE family scans the bundled diffs live. Or:

curl -s -X POST https://cainstudio.online/vibeguard-keystone/scan-code -H 'Content-Type: application/json' \
  -d '{"code":"from random import uniform\ndef risk_score(u):\n    return uniform(0, 1)\n"}'

The checks · The proof · Evidence

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.