Summary
This video from Wes Roth explores what he calls “Vibe Coding 2.0,” the shift from quickly generating an AI-built app to making it safe for a real company to use. Using Superblocks and its AI assistant, Clark, he builds a customer support CRM and follows a single $249 refund request from a support agent through to a manager’s approval.
The walkthrough starts in plan mode, where Clark proposes a data model covering customers, tickets, orders, refund requests, and history, backed by a Postgres database and the company’s design system. It then shows how two roles, the agent who requests a refund and the manager who decides, need different views and actions, with SSO login identifying each user by default.
The key lesson is that hiding an approve button is not real access control. The operation that changes refund status must verify the user’s role itself. Superblocks’ automated security scan flags two issues in the generated code: trusting identity information from the browser and failing to check the refund amount against the original order total. A “fix all” pass resolves them, leaving one low-severity advisory about server-side authorization. The video also distinguishes the business record inside the CRM from platform-level audit logs and the security center, which gives admins visibility into every internal app. The video is sponsored by Superblocks.
📺 Source: Wes Roth · Published October 13, 2026
🏷️ Format: Tutorial Demo
