
PRODPILOT
ProdPilot is Sudais Khalid's Final Year Project at Shifa Tameer-e-Millat University: a local Model Context Protocol (MCP) server that audits, fixes, verifies, and deploys vibe-coded Node.js/Express and React/Vite apps, closing the gap between “it runs on my machine” and “it is production ready.”
AI coding assistants made it easy to build an app in an afternoon. They did not make it safe to ship one. ProdPilot exists for the moment a vibe-coded project has to face real users, real traffic, and real attackers.

Vibe-coded apps share the same blind spots: hard-coded secrets, missing error handling, no tests, no health checks, no deployment story. A one-shot AI fix tends to break as much as it repairs, and nobody can tell whether the result is actually better.


ProdPilot runs as a five-layer agentic pipeline over MCP: Detection and Blueprint, an Audit Engine, a Bounded Agentic Loop, a Scoring Gate, and ProdPush deployment. Built with two teammates, Sudais owns ProdPush, the layer that ships a project once it passes the gate. It doubles as his AiTec internship project, with a research paper in progress.
ProdPilot runs as a five-layer agentic pipeline over MCP: Detection and Blueprint, an Audit Engine, a Bounded Agentic Loop, a Scoring Gate, and ProdPush deployment. Built with two teammates, Sudais owns ProdPush, the layer that ships a project once it passes the gate. It doubles as his AiTec internship project, with a research paper in progress.

An agent that knows when to stop: every fix bounded, scored, and verified before anything ships.
