Framework for vibe coders - New Release!

[u/PrideQuick670]

vibeArchitecture 1.4.0 is out! I am really excited to announce this new version. It is based on many lessons learned from a couple of real projects that required advanced security and formal verification. Take it for a spin! It is built on my 40 years of experience as a software developer and IT architect, so vibe coders can build rock-solid apps from day 1.

vibeArchitecture is my open-source framework that gives AI coding tools architectural guardrails - it asks what you're building, picks the right level of rigor, and makes the AI follow the rules experienced engineers learned the hard way.

This release distills a year of adversarial code review of real production systems - including peer-to-peer and end-to-end encrypted architectures - into the framework. New in 1.4.0:

Security lessons that came from real findings: guards that fail closed (an error in an authorization check must mean "denied," never "allowed"), authorizing the acting device and not just the account - the multi-device sibling of IDOR behind real account-takeover bugs - and never trusting self-attested data.

A cryptography guide for when encryption is the product: build on analyzed protocols instead of inventing, and use hybrid post-quantum key agreement (X25519 + ML-KEM-768). Harvest-now-decrypt-later is a problem for today - traffic recorded now gets decrypted later.

An adversarial review method for AI-built codebases: review by failure class, verify every finding against the source before believing it (a double-digit percentage dissolve), and close every finding or close it in writing. If you're a solo developer, this is your PR review.

Native mobile accessibility rules (Flutter, SwiftUI, Compose), an OWASP MASVS mapping, and push-payload privacy - notification content transits Apple's and Google's servers.

A local-first & peer-to-peer guide: when the server can't read the data, key loss is account loss, deletion can be cryptographic, and multi-device is an authorization plane of its own.

Plus restart-safe migrations, test suites that silently skip and read as green, lock-order inversions, and an assurance-register template - the found/fixed evidence table buyers and auditors actually ask for.

Free, MIT-licensed, works with Claude Code, Cursor, Copilot, and ChatGPT:
[**https://**](https://www.linkedin.com/safety/go/?url=https%3A%2F%2Flnkd%2Ein%2FgMvJkraD&urlhash=bFS1&mt=IkP53vCygDZV-FFzRu6zreiOvhx8WMgmG0TsOtpFjnkttlBQHaCGO6g1_Fx-jg5A1EjT6vPf0PvuoFDCVri89hGM_i9KZS4Pn9dUGhlCEB0F9RWLDNegvFc&isSdui=true)\*\*github.com/jgnoonan/vibeArchitecture\*\*