Be the first to know and get exclusive access to offers by signing up for our mailing list(s).

Subscribe

We ❤️ Open Source

A community education resource

Vibe coding for POCs, viable coding for production

Why code integrity merges review, security, and quality.

Vibe coding puts developer flow first, but standardizing quality requires verifying code integrity whether it’s generated by humans or AI. In this episode, Itamar Friedman, CEO and Co-founder of Qodo AI, joins the We Love Open Source podcast to share why code review needs AI to handle thousands of lines across piled-up PRs, how blue teams generate code while red teams verify integrity, and why junior developers must use AI to learn, not just to fix feedback and push it back through prompts.

Subscribe to our All Things Open YouTube channel to get notifications when new videos are available.

Itamar got interested in code quality 20 years ago using machine learning for hardware verification at a company sold to NVIDIA. Hardware specs are bytes in, bytes out. Software specs differ: User story in, user interface out. That’s where Large Language Models (LLMs) needed to catch up. His 2021-2022 realization that AI would generate most content, especially code, scared him. How do we avoid catastrophic moments where software stops working for fundamental services? Qodo launched three months before ChatGPT to address this.

Code integrity merges code review, security, and quality into one holistic solution. Red teams verify what gets built matches intent with high integrity. Blue teams handle code generation. The exciting future is shift left and shift right, pulling standards from PR discussions, Slack conversations, architecture documents to provide suggestions as you code. Mixing blue and red creates purple, hence Qodo’s purple branding.

Read more: Stop guessing, start measuring developer engagement

Junior developers face a critical choice in how they use AI. In one scenario, a senior gives feedback and the junior simply pushes it to AI to fix the code. This raises the question: Why do we need that junior at all? In the second scenario, the junior takes that same feedback but uses it as a learning opportunity. They ask questions of people and AI, then come back with understanding that goes beyond just prompting for fixes. The key is using AI to learn, not just to vibe code. That’s how you grow.

Vibe coding prioritizes flow. Agentic coding continues that flowish feeling. But Qodo advocates viable coding, keeping flows while making code reliable. Vibe coding works for Proof of concepts (POCs) and Minimum Viable Products (MVPs), alpha software can be done 2x to 50x faster. But beta and GA, especially heavy-duty software with personal information and transactions, requires viable coding.

Key takeaways

  • Code integrity merges review, security, and quality: Red teams verify code meets intent while blue teams generate. Future is pulling standards from PRs and Slack to provide suggestions as you code.
  • Junior developers must use AI to learn, not just fix feedback: Use AI to understand why code works by fetching similar open source projects and asking AI to explain differences, not just pushing senior feedback through prompts.
  • Vibe coding for POCs, viable coding for production: Flow-focused vibe coding works for alpha MVPs built 2x-50x faster. Reliable viable coding is required for beta and GA software.

Itamar built Qodo before ChatGPT launched to address AI’s impact on code quality, proving that standardizing integrity matters as much as generating code.

More from We Love Open Source

The opinions expressed on this website are those of each author, not of the author's employer or All Things Open/We Love Open Source.

Working on something worth sharing? Write for us.

Contribute to We ❤️ Open Source

Help educate our community by contributing a blog post, tutorial, or how-to.

Two World-class Events

If you didn't make it to All Things AI, check out the event summary, and make plans to join us October 19-20 for All Things Open.

Open Source Meetups

We host some of the most active open source meetups in the U.S. Get more info and RSVP to an upcoming event.