./index.html Tried / broke / fix ship logs from vibe coding and coding agents — Cursor, Claude Code, Bolt, Lovable. Curated from public sources. ./stories/agents-md-downloads-hijack.html ./stories/agents-md-downloads-hijack.html A webpage silently dropped AGENTS.md into ~/Downloads; Codex obeyed it and installed malicious npm function-color in >90% of tests. Claude Code CLAUDE.md variant leaked OAuth ~50%. ./stories/agents-sdk-eats-five-hour-limit.html ./stories/agents-sdk-eats-five-hour-limit.html Builders on T3 Code / Agents SDK saw the rolling 5-hour usage bar drain faster than interactive Claude Code; weekly limit unchanged. Theo flagged it as an Anthropic-side bug. ./stories/claude-code-usage-window-394-subagents.html ./stories/claude-code-usage-window-394-subagents.html A max-effort Claude Code research turn spawned 394 subagent calls (341 concurrent) and ~84M tokens before lockout; parallel main sessions still drained the plan. ./stories/project-mcp-json-starts-without-ask.html ./stories/project-mcp-json-starts-without-ask.html Anthropic MCP docs: in claude -p / Agent SDK / some cloud sessions, project .mcp.json servers load without the interactive approval prompt. ./stories/litellm-pypi-stealer-gh-cli-oauth.html ./stories/litellm-pypi-stealer-gh-cli-oauth.html Poisoned PyPI/Docker release ran ~2h on Oct 21; official post ties the chain partly to Claude Code embedding GitHub CLI OAuth tokens into logged responses. ./stories/payment-failed-webhook-only-logs.html ./stories/payment-failed-webhook-only-logs.html Cursor/Lovable Stripe webhook had the failure case, but only logged and returned 200 — users kept paid access forever. ./stories/rls-using-true-leaked-users-table.html ./stories/rls-using-true-leaked-users-table.html 5/5 audited Cursor/Lovable apps had open read policies so anyone could SELECT *. ./stories/service-role-key-in-browser-bundle.html ./stories/service-role-key-in-browser-bundle.html One vibe-coded app leaked the entire users table via a key that lived in page JS. ./stories/user-metadata-role-admin-escalation.html ./stories/user-metadata-role-admin-escalation.html Role checks on client-writable metadata let any logged-in user promote themselves. ./stories/lovable-deploy-auth-still-localhost.html ./stories/lovable-deploy-auth-still-localhost.html Publish copied the UI; Site URL / redirects / Stripe webhook stayed on preview settings. ./stories/stripe-edge-webhook-401-verify-jwt.html ./stories/stripe-edge-webhook-401-verify-jwt.html Supabase Edge Functions default JWT check rejected Stripe before the handler ran. ./stories/bolt-export-stripe-preview-wall.html ./stories/bolt-export-stripe-preview-wall.html App worked in Bolt preview; after export/deploy, real Stripe webhooks and live keys fell apart on Netlify/Vercel. ./stories/agent-git-restore-wiped-uncommitted.html ./stories/agent-git-restore-wiped-uncommitted.html Sandbox Cursor agent restored a tracked file; new uncommitted edits were gone with no confirm. ./stories/max-plan-burn-agents-and-plugins.html ./stories/max-plan-burn-agents-and-plugins.html Tracked ~100 Claude Code sessions: subagents, screenshots, and unused MCPs dominated burn. ./stories/vibe-security-checklist-seven-leaks.html ./stories/vibe-security-checklist-seven-leaks.html Checklist from real vibe-coding audits: open RLS, service_role in client, wild CORS, unvalidated webhooks, and more demo defaults. ./stories/cursor-free-iterate-wrecked-game.html ./stories/cursor-free-iterate-wrecked-game.html Left Cursor free to iterate on Expo paths for itch.io; UI corrupted over ~2 hours. Recovered via last good git tag. ./stories/auth-dev-dead-prod-hardcoded-env.html ./stories/auth-dev-dead-prod-hardcoded-env.html Cursor-built auth silently used a hardcoded environment variable; prod logins failed while local looked fine. ./stories/context-drift-oauth-to-api-keys.html ./stories/context-drift-oauth-to-api-keys.html After Google OAuth, updating edge-function metadata made the agent reintroduce old API keys and break the flow. ./stories/stripe-webhook-skeleton-no-db.html ./stories/stripe-webhook-skeleton-no-db.html Cursor/Lovable Stripe handler returns 200 and logs the event, but never flips is_paid or access in the database. ./stories/bolt-launch-rls-stripe-gaps.html ./stories/bolt-launch-rls-stripe-gaps.html Second real user hit RLS/session timing; unsigned Stripe webhooks left the database stale on launch night. ./stories/same-spec-three-security-profiles.html ./stories/same-spec-three-security-profiles.html 2026 study: Lovable missing RLS; Bolt secrets in the frontend; Cursor BOLA on invoice routes — same spec, different holes. ./stories/claude-code-stripe-no-signature.html ./stories/claude-code-stripe-no-signature.html Generated Stripe webhook parsed JSON with no constructEvent — forgeable paid upgrades without signature check. ./stories/paying-saas-open-rls-dead-email.html ./stories/paying-saas-open-rls-dead-email.html JWT still valid after cancel; is_paid writable from the browser; email_verified never flipped on a vibe-coded SaaS. ./stories/checkout-refresh-loop-api-spend.html ./stories/checkout-refresh-loop-api-spend.html User hit refresh in a loop at checkout with no rate limit; every refresh fired expensive API routes on a Claude Code app. ./stories/two-markdown-files-stop-amnesia.html ./stories/two-markdown-files-stop-amnesia.html Append-only project log plus roadmap Markdown keeps Cursor, Claude Code, and Codex from forgetting decisions across sessions.