24 drop-in rules and prompts that tell your AI coding tool not to hardcode API keys, skip auth checks, grant free access on Stripe redirects, leave Supabase tables open, or delete code you didn't ask it to touch.
Tested in public, misses included: the rules helped on Supabase RLS and did nothing for Stripe. See every output →
30-day refund. If it isn't useful to you, email team@vibeguardrails.com or reply to your receipt and we'll refund it. No questions.
AI tools are great at making apps that work in the demo. Left alone, they'll also put secret keys in the browser, leave database rows readable by anyone, and trust whatever price the client sends.
Plain-text rules your AI reads on every request, plus prompts to audit, debug and deploy. Each rule ends with a short checklist so you can confirm it worked.
.cursor/rules/*.mdc, CLAUDE.md, AGENTS.md, and paste-in text for Lovable, Bolt, v0 and Replit. Install takes about a minute.
Real MacBook photos of our storefront and free sample. Cropped and retouched to remove creator controls and desktop clutter.
We ran the same Supabase + Stripe app prompt 6 times, 3 with no rules and 3 with our free rules, and published every raw output. The rules helped on Supabase RLS. They did nothing for Stripe. The Stripe rule in the Ship-Safe Pack (rule 04) was not part of that test, so we can't tell you yet how well it works. One model, 3 runs a side: a demonstration, not a benchmark.
One-time payment. Instant download.
Secure checkout via Gumroad.
30-day refund. If it isn't useful to you, email team@vibeguardrails.com or reply to your receipt and we'll refund it. No questions.
Secure checkout via Gumroad.
30-day refund. If it isn't useful to you, email team@vibeguardrails.com or reply to your receipt and we'll refund it. No questions.
Secrets & env vars, Supabase RLS, and the "don't delete my code" scope guard, in all four formats.
Want launch news and new rules as they drop?
Subscribe on Gumroad. Opens in a new tab, unsubscribe anytime.
✉ Get launch updates & new rules →No. Paste-in versions work in Lovable, Bolt, v0 and Replit. The prompts are written in plain English.
No tool can. These rules make common, costly mistakes much less likely and give you checklists to verify. Still review what you ship.
Single user; use in unlimited personal and client projects. Please don't resell the files.