I Reviewed 3 Vibe-Coded PRs With Hardcoded Keys — The Problem Isn't the AI, It's That I Approved Them

Three AI-generated PRs. Three AWS API keys sitting in the code. Three times I approved them because the tests passed. The security problem with vibe-coding isn't the model — it's how your attention shifts when you're reviewing code a human didn't write.