This was a great read, thanks. Definitely provides evidence for my fears about vibe coded projects built by people who lack expertise to guide AI well. And if these are the issues you can see, it makes you wonder about what's hard to discover. Security to me is one of those things you want to be thinking about throughout the whole process of building it, not something you tack on at the end.
Some database tests can't be done within transactions. With postgres, I create a copy of the database via WITH TEMPLATE, and each test runs in its own copy of the database. Then it can use or avoid transactions as it pleases, because the whole thing is local to that one tests anyway.
Interesting, I had a similar approach while studying philosophy. I much prefer to think and write than read, so I'd often think through a philosophical problem first, and then read others on the topic. I'd find that this order helped me grasp a topic well.
I don't know if I do the same thing with programming.
I fiddled around for many hours with traefik, and could not get it to do what I wanted -- something I'd done before and had a known example working config of.
10 minutes of caddy, I had everything running exactly as I wanted and the job was done.