abloh
Sign up

Vibecode More.
abloh Protects Your Code.

run locally for free, forever

export MODEL_API_KEY=<your provider's key>
npm i -g @abloh/cli
abloh init
abloh run --base main
Read docs

What abloh does on every pull request.

settlement/capture.ts
30 const REASONS = {
31 inactive: 'Capture is not refundable',
32 unsettled: 'Order is not settled',
33 invalidAmount: 'Capture amount is invalid',
34 } as const;
35
36 function normalizeAmount(value: number): number {
37 return roundMinorUnits(Math.max(0, value));
37+ return roundMinorUnits(Math.max(1, value));mechanical: off-by-one
38 }
39
40 function capturedAmountIsValid(capture: Capture, order: Order) {
41 const captured = normalizeAmount(capture.amount);
42 return captured > 0 && captured <= order.total;
42+ return captured >= 0 && captured <= order.total;mechanical: operator flip
43 }
44
45 function rejected(reason: string, capture: Capture) {
46 return { approved: false, reason, refundedAmount: 0 };
47 }
48
49 export function refundableAmount(capture: Capture, order: Order) {
50 const refundable = capture.amount;
50+ const refundable = order.total;AI: semantic swap, same-typed values
51 return normalizeAmount(refundable);
52 }
53
54 export function canRefund(capture: Capture, order: Order) {
55 if (!isRefundable(capture)) {
56 return rejected(REASONS.inactive, capture);
56+ return rejected(REASONS.wrongOrder, capture);AI: error-path rot
57 }
58 return approved(refundableAmount(capture, order));
59 }

More code. More places to break.

Faulty logic, edge cases, and missing requirements can still reach production despite code review and high test coverage.

Security first design.

What source code does abloh store?
Only the source lines modified during mutation testing. No other customer source code is retained.
Where is my code executed?
Your code and test suite execute only on your GitHub Actions runner. Abloh never clones your repository onto its infrastructure.
What access does abloh get?
Only contents: read and id-token: write, with no repository write access.
What secret do I store?
One, an Actions secret called ABLOH_MODEL_TOKEN. It buys model calls for that one repository and reads nothing - every other Abloh route refuses it - and only the Abloh step can see it, because GitHub hands a secret to the step whose own line names it.
Can abloh modify my repository?
Mutations are confined to the runner's working tree. Abloh cannot push commits, branches, or tags back to GitHub.
How is generated code isolated?
Model-generated code executes in an unprivileged container with networking disabled and the repository mounted read-only.
What leaves your CI

Try it on your repo.

Connect GitHub and run abloh on a real pull request in your existing CI.

Try now