Lee Hayward

./about Who's behind the builds

I'm a UK based vibe coder. AI drafts, I proof, I ship, and I hold code and copy to the same standard. I riff on domain ideas and build side projects like DomainRiff and LookMa from my own homelab.

./projects Featured builds

./stack How it gets built

./hardware The rigs behind the site

./homelab The machines that never sleep

./latest Latest on X

Lee Hayward@vibedcoder · 10 Sep 2026, 11:01I want to say something out loud that I've been chewing on for a few weeks.

I'm not scared of AI. I use it every day, I build with it, and I think it's the best thing to happen to hobbyist developers in my lifetime.

I'm scared of the treadmill it comes with.10000Lee Hayward@vibedcoder · 10 Sep 2026, 09:25A pre-registered study gave coding assistants nine versions of the same package install, including signed releases and provenance attestations, some of them signed by the wrong issuer on purpose.

Verification basically never happened. The assistants opened a trust signal before installing in 9 of 1,920 trials, 0.5 percent, and not one trial ran a verification command.

The line from the paper that should sting: publishing trust signals is necessary but not sufficient.

I spend my whole review budget on the code the agent writes, then let it add a dependency in one line and read that line for about a second. Nobody is checking the install.

How much do you actually check before your agent pulls something in?00008Lee Hayward@vibedcoder · 9 Sep 2026, 22:17Reservoir Planters - domainriff.app
a riff for reservoirplanters.comreservoirplanters.com: Reservoir Plantersdomainriff.app000016Lee Hayward@vibedcoder · 9 Sep 2026, 22:14lookma.dev

Vibed Discord Music Bot - Built with DeepSeek, Hermes.

Community-voted, no pay-to-rank on Look Ma.Vibed.win Discord Music Bot | Look Malookma.dev001048Lee Hayward@vibedcoder · 9 Sep 2026, 22:06Toastboard - Built with Cursor.

Community-voted, no pay-to-rank on Look Ma. lookma.devToastboard | Look Malookma.dev112034