I got tired of watching vibe-coded projects die after the demo so I built a fix

Dev.to / 4/13/2026

💬 OpinionDeveloper Stack & InfrastructureTools & Practical Usage

共有:

Key Points

The author argues that AI-assisted (vibe-coded) projects often fail after demos because they lack a clear, maintainable structure and sufficient context for production.
They built “bedrock,” a pre-AI layer that provides a CLI workflow to generate standardized context files (e.g., CLAUDE.md, .cursorrules, .windsurfrules) from a single source of truth.
The project’s core focus is “7-sustain,” aiming to address maintenance with explicit protocols such as MAINTAIN.md, REFACTOR.md, and HANDOFF_HUMAN.md so projects survive beyond the initial build.
Bedrock also includes a security layer designed to prevent known classes of issues, including misconfigured Supabase RLS and dependency/supply-chain risks (e.g., an Axios supply chain attack), by enforcing security checks rather than assuming safe dependencies.
The author says bedrock is available on GitHub in an early (“baby stage”) version and asks for feedback on what functionality is missing to improve usefulness.

not a rant, just something i noticed
every project fails the same way. works in the demo, breaks in prod, nobody knows why. the AI didn't write bad code but you just gave it nothing to work with.
i've been building something called bedrock. it's the layer you put in place before the AI touches anything. you run a CLI, answer a few questions about your project, it generates all your context files pre-filled -- CLAUDE.md, .cursorrules, .windsurfrules, whatever tool you use. one source of truth, no duplication.
the part i care most about is 7-sustain. there's a thread on reddit with 562 upvotes called "nobody wants to talk about maintenance." bedrock is my answer to that thread. MAINTAIN.md, REFACTOR.md, HANDOFF_HUMAN.md -- actual protocols for keeping AI-built projects alive past the demo.
also has a full security layer because of two real incidents: the Lovable/Supabase RLS failure that exposed 170 production apps, and the March 2026 Axios supply chain attack. AI skips dependency review by default. bedrock doesn't let it.
It's available on github

https://github.com/mohammed-bfaisal/bedrock

tell me what's missing

p.s. Would love advice and support to make this even better and truly useful. Its in baby stage and im working on it so you might find it incomplete, spare me for that!