<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>SafeForProd blog</title><description>Practical security guidance for AI-built apps, with explicit testing boundaries.</description><link>https://safeforprod.com/</link><language>en-us</language><item><title>Where security review fits in the AI build loop</title><link>https://safeforprod.com/blog/iteration-speed-trap/</link><guid isPermaLink="true">https://safeforprod.com/blog/iteration-speed-trap/</guid><description>A practical review rhythm for teams shipping AI-built apps quickly, without pretending every change needs a full audit.</description><pubDate>Mon, 20 Jul 2026 00:00:00 GMT</pubDate></item><item><title>What a browser-visible security check can—and cannot—prove</title><link>https://safeforprod.com/blog/vibe-coding-security-gaps/</link><guid isPermaLink="true">https://safeforprod.com/blog/vibe-coding-security-gaps/</guid><description>A clear boundary between public deployment evidence and the server-side controls that require authorized source access or human review.</description><pubDate>Fri, 17 Jul 2026 00:00:00 GMT</pubDate></item></channel></rss>