The versioned standards VibeCode QA judges your code against — fixed, reviewable
ground truth, not a model's memory of a blog post. Every rule has a stable ID
(R-<AREA>-n), the reason it exists, a ✓/✗ example, and a
machine-readable detection signal.
Standards are composed per slice, not stamped one-per-stack. VibeCode QA detects what each part of your repo is, then judges it against exactly the right set:
your repo → slice it → 1 archetype + N layers + cross-cutting → judge vs pinned edition
So a monorepo is judged slice-by-slice: a React SPA frontend against react-spa, a
Cloudflare Functions API against pages-fullstack, an SDK against library — each
with its own rubric. The machine-readable catalog (detection rules + editions) lives at
/standards/registry.json.
| Standard | What it is | Status |
|---|---|---|
| react-spa | React, client-rendered, static-hosted. No SSR, no server of its own. | v1 · LIVE |
| pages-fullstack | Static frontend + API co-deployed as Cloudflare Pages Functions. | planned |
| worker-edge | A standalone Cloudflare Worker / Durable Object service. | planned |
| node-service | A Node HTTP service or CLI. Not shipped to a browser. | planned |
| library | A published package consumed by other code. | planned |
| react-ssr | Server-rendered React (Next.js / React Router / Remix). | planned |
| Standard | What it is | Status |
|---|---|---|
| d1-database | Cloudflare D1: schema, migrations, parameterized queries. | planned |
| mcp-server | Model Context Protocol tools: schemas, scopes, audit. | planned |
| tailwind | Tailwind v4 CSS-first, tokens in @theme, no runtime CSS-in-JS. | planned |
| tanstack-query | Server-cache for remote data: caching, dedupe, loading/error. | planned |
| zod-validation | Runtime schema validation at boundaries. | planned |
| Standard | What it is | Status |
|---|---|---|
| typescript | Strict flags, project references, no-any, typed boundaries. | planned |
| security | Secrets handling, XSS/injection, dependency supply chain. | planned |
| testing | Runner choice, behavior-not-implementation, coverage floor, CI. | planned |
| accessibility | Semantics, keyboard, focus, ARIA, contrast. | planned |
| dependencies | Lockfile pinning, audit, vetting, no rogue install scripts. | planned |
| Standard | What it is | Status |
|---|---|---|
| react-spa-on-cloudflare-pages | SPA + Functions in one Pages project: same-origin /api/*, _routes.json, secrets in Functions. | planned |
A standard is versioned on change, not dated — a new edition is cut only when best practice materially shifts. Each carries a review date so a scan can flag "judged against a standard last verified N months ago." Today: react-spa v1 targets React 19 · Vite 8 · Tailwind 4 · TS 6, reviewed 2026-07.
Run it yourself: npx @vibecodeqa/cli · Machine-readable catalog:
registry.json