felipe/vibeflow-n8n
1
0
Fork 0
mirror of https://github.com/domfelipe/vibeflow-n8n.git synced 2026-08-07 07:36:46 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
vibeflow-n8n/docs/demo.md
Felipe Domingues f62a78faaf
Add outcome-aware preflight contracts for v0.9 (#6) 
Add VF010-VF013, structural outcome contracts, adversarial fixtures, documentation, and Friday release materials.
2026-07-22 13:58:46 -03:00

1.5 KiB
Raw Blame History

Reproducible demo

Safe workflow

node bin/vibeflow.mjs check examples/safe-support-agent.workflow.json

Expected result: exit 0, zero findings.

Unsafe workflow

node bin/vibeflow.mjs check examples/unsafe-support-agent.workflow.json --fail-on never

Expected result: VF001-VF009 findings covering secrets, dangerous nodes, webhook authentication, error handling, idempotency, AI safety, timeouts, and retries.

Dangerous outcome

node bin/vibeflow.mjs check examples/unsafe-refund.workflow.json --fail-on never

Expected result: the ordinary HTTP refund node triggers blocking VF010 plus VF012 and VF013, even though its node type is not inherently dangerous.

Contracted outcome

node bin/vibeflow.mjs check examples/safe-refund.workflow.json \
  --config examples/outcome-contracts.vibeflow.json

Expected result: exit 0, zero findings. The graph contains a dominating atomic claim and durable audit, structural approval/amount/counterparty gates, error notification, and compensation evidence.

Automation output

node bin/vibeflow.mjs check examples/unsafe-support-agent.workflow.json --format json --fail-on never
node bin/vibeflow.mjs check examples/unsafe-support-agent.workflow.json --format sarif --output vibeflow.sarif --fail-on never

For pull requests or other untrusted checkouts, add --locked. The bundled GitHub Action does this automatically.

Full project gate

npm run verify