cofounder

CoFounder

Keeps AI coding agents from wrecking your codebase. Free, open-source guardrails + spec-driven feature flow for AI-assisted development, by Waymaker AI.

CoFounder plugs into your existing stack (Vercel AI SDK, Supabase, LangChain, CrewAI, OpenClaw, Claude Code) and stops agents from committing secrets, leaking PII, shipping mock data, blowing through budgets, or refactoring things no one asked them to. It's the safety harness and coach for AI-assisted work on real products — not a magic "ship-a-startup-in-30-minutes" button.

• Free and open source (MIT)
• Bring-your-own LLM providers and tools
• Designed for real products, not toy demos

---

Quick Demo

Before CoFounder (agent goes rogue):

❌ Agent commits AWS keys to repo
❌ Agent leaks patient SSN in API response
❌ Agent blows through $500 in API calls overnight
❌ Agent gives investment advice (SEC violation)
❌ Agent rewrites your auth middleware "for fun"

After CoFounder (3 lines of code):

import { createGuard } from '@waymakerai/aicofounder-guard';

const guard = createGuard({
  pii: 'redact',
  injection: 'block',
  budget: { limit: 50, period: 'day' },
  compliance: { frameworks: ['hipaa', 'gdpr', 'sec'] }
});

const result = guard.check(userInput);
// ✅ PII redacted, injections blocked, budget enforced, compliance checked
// All in < 1ms with zero dependencies

---

Why CoFounder?

• ⚡ < 1ms guard latency (vs 100ms-2s for LLM-based alternatives)
• 📦 ~50KB, zero runtime dependencies
• 💰 70% cost reduction through caching + smart routing
• 🔒 HIPAA, GDPR, SEC, SOX, PCI DSS compliance built-in
• 🔌 Works with LangChain, CrewAI, Vercel AI SDK, Supabase
• 🆓 MIT licensed, free forever

---

Reality Over Hype (No "30-Minute Production" Myth)

AI frameworks love to promise:

"Ship a production-ready product in 30 minutes."

CoFounder is deliberately not that.

You can't build a real, scalable, secure product in 30 minutes — not if you care about:

• security and privacy
• real databases and real users
• code quality, tests, and reviews
• uptime, monitoring, and incident response
• business rules, compliance, and long-term maintainability

CoFounder refuses that hype.

Instead, CoFounder's promise is:

CoFounder helps AI-assisted development move faster without becoming sloppier — by stopping agents from doing things no responsible engineer would do.

Not "magic production in 30 minutes," but:

• less rework
• fewer messes
• fewer "WTF did this agent just change?" moments
• more signal, less chaos

CoFounder focuses on:

• turning feature ideas → clear specs → safe draft implementations
• enforcing design systems, business rules, and engineering hygiene
• integrating into real stacks (Vercel AI SDK, Supabase, LangChain, CrewAI, etc.)
• helping humans ship real features faster instead of cleaning up after reckless agents

You still need engineers, reviews, and real operations. CoFounder just makes the AI-powered parts safer, sharper, and less painful.

---

Core Guardrails

CoFounder is an integration-friendly guardrail & guidance layer for AI agents working in real codebases and products.

1. Stop Bad Agent Behavior

• Don't break the codebase
• Don't secretly add features without asking
• Don't duplicate existing features
• Don't randomly refactor everything
• Don't trash the design system or UX patterns
• Don't use mock/demo data in production
• Don't "fake done" when nothing is wired to real systems

2. Enforce Good Engineering & Product Hygiene

• Use real DB models and APIs, not invented ones
• Follow the design system and shared UX patterns
• Follow business rules, constraints, and specs
• Ask clarifying questions when requirements are incomplete
• Always surface what changed and why
• Encourage tests, checks, and safe PRs — not "oops I pushed to main"

3. Real Features, Not Just Demos