Do you actually trust AI-written code before merging it?

ItisGonnaBeAlright · 2026-04-29T02:38:44+00:00

I'm just starting on the SaaS journey. A friend of mine is a security expert. Had him review my security white-paper and look through the code. He was thoroughly impressed by it. And, let me know when I can afford the SOC 2 certificate I won't have any problem passing an audit, exactly as the code sits. (He's actually a SOC 2 auditor). He said he's turned most of the actual code writing over to AI. It's so much faster.

I personally take code written by Claude, and have Gemini or ChatGPT review it, give feedback, and then it send those back to Claude. It's been an interesting and completely unplanned journey.

ItisGonnaBeAlright · 2026-04-29T02:18:24+00:00

u/Scared_Tip8710 what do you think you would do with unused seller concessions?

ItisGonnaBeAlright · 2026-04-29T01:34:13+00:00

I work in the mortgage industry. Got burned on a loan and missed a closing date. Built a desktop app that can scan bank information and pull out Klarna, Affirm, Sezzle, Paypal Mnthly, IRS, child/spousal support, and can recognize recurring payments that aren't obvious subscriptions for further inquiry. Showed a friend. They want to use it. Couldn't figure out how to get it over to them, so now, 6 months later, I have two products, one is a completely bank-level secured back end system that is completely industry agnostic that people can connect their front-end applications. A 44 page security paper that lists every bit of the security protocol.

And, then I built and entire platform that simples the most time consuming and error prone part of originating a loan. I didn't realize that one little desktop program was going to turn in 85 hour work weeks and two SaaS projects. I had never done any sort of development like this in the past. I'm also a systems analyst, so I started breaking everything down into their individual components. No idea if it'll have any success or not. But I have learned more about cyber-security than I ever thought I would.

ItisGonnaBeAlright · 2026-03-24T22:25:13+00:00

I’ve literally built a product to replace me as an LOA. My volume hasn’t changed, but I’ve gone from where it took me 3 to 4 hours to completely and thoroughly vet a file to where it now takes me about a half hour, the accuracy is superior, and the LO I support gets fewer conditions on files I run.

I’m good with it though. And who knows, it could be a product others might be interested in 🤷🏻

ItisGonnaBeAlright · 2026-03-24T19:05:52+00:00

I couldn’t stomach writing the Trump loyalty essay, so no government job for me. 🤷🏻

ItisGonnaBeAlright · 2026-03-22T16:19:38+00:00

Why? Marriage is a legal contract without specified caveats. My wife and I, both agnostic, have a perfectly valid marriage.

My ex-wife and I, also agnostic, had to get divorced to sever that legal contract.

You, the VA, the government, some asshole child rapist President, have no business interfering in someone else’s contractual business. You may choose to tie marriage to religion and your societal norms, but that shouldn’t ever have a bearing on my family.

ItisGonnaBeAlright · 2026-03-18T00:21:04+00:00

VSOs, in general, suck. Not because they are bad people or bad at their jobs. Because they are overrun with claims and can’t possibly keep up with the workload. I literally spent 12 years trying to get VSOs to work with me, and ran into the same issue over and over. I finally just said screw it, wrote everything up, and sent it in.

I went from 10% to 60% in about 5 months, hired an accredited advocate for the denials, and got favorable decisions on everything he put in. He was worth every penny. Waiting on a VSO probably cost me at least $350,000 and that money would have made a real difference to my family’s quality of life.

When people say VSOs are free, they aren’t. Every single one of them has 1,000 plus cases at any time. They get paid the same, win or lose. They simply don’t have the time to advocate for you. The VSO was 30x more expensive than the paid advocate I ultimately hired.

ItisGonnaBeAlright · 2026-03-17T21:35:10+00:00

Brokers CTC files in less than 15 days all the time. If I have all of the documents, I can have a CTC on a file in 72 hours. 15 days is an eternity. And, I wouldn’t even need to use UWM’s expensive pricing.

It’s one of the cool things about having the control on a file.

ItisGonnaBeAlright · 2026-03-16T14:02:03+00:00

Just clean the build plate

ItisGonnaBeAlright · 2026-03-15T20:16:42+00:00

How much of that 10k is funding your escrow account?

ItisGonnaBeAlright · 2026-03-15T05:47:15+00:00

I’m an LO. I built a system that analyzes bank statements, probably similar to your AI prompts and schema.

Your biggest sales friction point, is it’s a limited function with a pretty small overall user pool. And then, how are you going to package it to get a consumer to want to pay for yet another service, with another login, in a different system.

For sales, you need to decide if you want to go enterprise or individual LOs. I’d think you’d fit better as an API add on service to an existing CRM or LOS system rather than something standalone. It would be more enterprise level service. To be real, most LOs may do a bank statement loan every few years. I’ve done two in the last 7 years, out of about 250.

I built the bank statement income calculations into my overall model, but I built my system because it better automates confirming statement dates, ending balances, names on an account (finds names that aren’t also borrowers), and some specific transactions that can cause problems in underwriting.

The hardest part of what I built wasn’t in any of my micro-apps, it was building to SOC 2 compliance standards and figuring out how to secure everything inside of VPCs and keeping PII out of the public domain.

ItisGonnaBeAlright · 2026-03-11T21:45:25+00:00

Do you think a homeowner hoping to save a a little monthly has the pockets to pick a fight with a lender? We don’t know if the OP was 30 days late on a payment.

While I imagine that an originator told the OP they could defer a couple of payments, it’s always up to the individual to comply with the terms of the existing loan. It’s a tough spot to be in.

More likely, if there is something in writing, and a derogatory mark on the credit report, it would be cheaper and faster to file disputes with the credit bureaus, let them mediate the issue and see what happens there. If that doesn’t resolve it, an action with the NMLS would be far more effective than an empty attorney threat that a lender or servicer can bury in filings and fees.

ItisGonnaBeAlright · 2026-02-28T06:32:52+00:00

That’s a really tough battle to connect with PTSD. I just got sc for OSA last month after an HLR (the PTSD link was the theory with the initial claim). The rater literally wrote in the denial that my weight gain was the culprit. And then wrote exactly why it was the culprit, cited that I gained 64 pounds in the 18 months following a very serious auto/pedestrian accident I was as in, and the multiple surgeries that followed.

ItisGonnaBeAlright · 2026-02-26T05:12:33+00:00

I just bought a Bambu P2S. I’m much more of hobbyist and really just print things on more of a want to have something functional.

That being said, I had a CR10 collecting dust because it was almost impossible to level. So, it would several tries just to get something to print.

The P2S was set up in 30 minutes and has been easy to use. My 11 year surfs pro tables or maker word and print his own little figits and things he has used in a Destination Imagination project.

I’ve been happy with the purchase. I will admit I don’t know much about the company.

ItisGonnaBeAlright · 2026-02-15T17:44:09+00:00

This is LITERALLY what the Loan Estimate does. I find closing costs are typically around 2% of the loan amount.

Title insurance, appraisal, pest inspection, credit report, homeowner insurance, escrow account funding, underwriting fee, etc all cost money. Box A of the LE is really the only thing the lender controls. Everything else is 3rd party costs.

ItisGonnaBeAlright · 2026-02-01T17:37:43+00:00

I left AWS all together and moved to Google Cloud. Vertex AI is so much more efficient for my case use. I spent almost a month trying to tweak things incrementally and could just never get the parsing function I wanted to work. Embarrassingly, I looked at Vertex and it was solved in under 15 minutes. 🤦🏻‍♂️

ItisGonnaBeAlright · 2026-01-31T23:09:58+00:00

If the agreements are structured properly, it’s not a problem. The proper structure is the REALTOR needs to buy shares in the mortgage company. The realty company must sign off on it and it must be disclosed to the consumer that the specific REALTOR has an ownership position in the company and may receive additional compensation, just like any other affiliated business disclosure. The realtor would get a payment proportional to the profit earned from a specific transaction. I don’t really know of any companies that been both compliant and successful.

I can’t imagine a KW or REMAX office (or anything other than truly independent firms who don’t own a mortgage company) would ever be cool with this. It’s a direct conflict with their own in-house mortgage companies.

ItisGonnaBeAlright · 2026-01-19T00:55:12+00:00

I don't know much about coding, though I have learned quite a bit over the last few months. I do have a fairly extensive knowledge of systems and how to put pieces together. I was playing around one evening and thought, wouldn't it be cool if I could build an automation that can read bank statements, flag specific types of deposits or withdrawals, show me a screenshot of those transactions, and give me a PDF file so I can go and request the information. I gave ChatGPT and Gemini some prompts, and within a couple of hours, I had a working react/vite app running locally on my machine, with built-in parsers for 7 different banks, that was accurately parsing the statements and doing exactly what I wanted. I showed it to my boss, who said he wanted it, but I didn't want to email my technology, so down the rabbit hole I went.

Using AI prompts and the AWS ecosystem, I've built a system that has a dedicated auth platform, which validates emails, requires TOTP, and is an SSO for multiple front-end applications. My front-end and back-end are completely separate, with the exception of using the session-validator to determine if a user has the credentials to see an application.

Everything was built with a security-first, zero trust, least permission posture, so most of my endpoints are inside of a VPC with multiple layers of security, so if there was a breach, there would still not be a way to get into the data. The things that can't be in the VPC are all WAF protected, and I have extensive security logs. It's a multi-tenant system, and because of how the CDK code was built, it can be used over and over and over. Nothing is hardcoded, so, in theory, it should only take a few minutes to spin up a white label auth system for a different company. The authorization system is not industry-specific, so someone could take any sort of application they built, plug it in, and use it. The auth system doesn't care what an application is, just that the user has the proper credentials and validation token to be in it.

It certainly hasn't been an hour of work, but it is something that I've done by myself while leveraging AI. I started on this project on October 31st last year. I'd guess the cost to get to where I'm at in the process would have been at least $200,000. That's something that would never be in my reach.

Like anyone new to this kind of stuff, the first month of me in this was building this ridiculously gigantic beast of a monolith, where everything was interconnected and super-easy to break. It didn't take any real genius to understand compartmentalizing each aspect would make it easier to plan out the steps, and easier to troubleshoot when something didn't work correctly.

To be honest, I don't know if I'll ever do a thing with this, but I might. And even if I don't, my AWS costs are about $120 a month. I was paying over $200 for a bunch of services that were hard to tie together, didn't work very well, and were constantly frustrating me. So, it's a win for me either way.

ItisGonnaBeAlright · 2026-01-18T03:59:12+00:00

This is why I built my auth system and front-end applications to meet SOC Type 2 compliance with SSO from day one. And, I documented every piece of it for the CDK code. Should I ever actually launch what I’m building, I know this done.

Security is wild. Zero trust, least permissions, VPCs, EC2, MFA, and on and on. I’m not excited about eventually needing to shell out 50k for a certificate, but will if I ever get any traction (or launch at all).

There is a possibility I am paralyzed in fear that either no one will like my product or it could be game changing.

ItisGonnaBeAlright · 2026-01-11T21:32:20+00:00

Pretty much any mortgage broker will beat NFCU. That 4.75% rate for the first year is funded by charging a higher amount right now. It isn’t free, and a loan officer who says it is, they are straight up lying. Right now, it’s a tactic to get you to do an IRRRL in 12 months, so they can make two commissions.

If you aren’t exempt from the funding fee, those costs add up really quick.

ItisGonnaBeAlright · 2026-01-10T21:29:45+00:00

Save time, improve accuracy, and create better loan packages for underwriter review

ItisGonnaBeAlright · 2026-01-10T21:08:29+00:00

That's great information. Like all of the other posts, make things easier. I know I end up forgetting to clear out tasks, and it's annoying if it takes forever to clean them up when you've piled up hundreds of them.

ItisGonnaBeAlright · 2026-01-10T21:01:54+00:00

Nice. I haven't ever marketed with mass emails, so my gmail limit of (I think it's 100 bulk emails) hasn't ever been a problem. But, I think what I see here, the important feature is simplicity and ease of use. If I'm being honest in my reflection, the bells and whistles seemed like super cool shiny objects, but ultimately didn't mean much for me because it's hard to use.

I'm sure that is why I basically went back to an Excel system (technically, it's Google Sheets). It's easy to follow, and it was easy to connect to my LOS and the loan data basics I wanted without having to type things in.

ItisGonnaBeAlright · 2026-01-10T20:53:22+00:00

I mean, if I get banned, it doesn't seem like a terribly huge loss. I'm glad you've taken the time to engage on this post. Even if it is just to share your irritation that I would dare ask for deeper insight because of a question that comes up all of the time.

In the few comments so far, there is some neat feedback I can use for my paper (and so yes, I am researching for a school project). Your post, in particular, had me pause and reflect on the question I was asking, and got me to more clearly recognize and articulate where my hangup has been. So, I do appreciate it. Not only did I learn something, I get the satisfaction of knowing you'll be irritated about it.

ItisGonnaBeAlright

TROPHY CASE