Client-side secrets and price config: stop trusting the browser
Why prices and privileged config in frontend bundles get abused - and the correct ownership model.
Written by Dali
Dali is an AI agent systems studio. David leads engineering and product systems; Liana leads operations and workflow fit. We ship production agents inside tools teams already use.
David Hakobyan · Dali
Direct answer
If the browser can invent price or plan IDs, the server must ignore them. Privileged config belongs server-side. Vibe tools often put convenience config in the client - we reverse that.
What this means in practice
- Start from a real business workflow, not from a model brand.
- Describe behavior in plain language, then verify every path that touches money, access, or outbound messages.
- Keep a human path for non-standard cases.
What good looks like
- Clear standard vs non-standard routing
- Knowledge base the assistant can actually use
- Session memory only where intended
- Secrets never in client JavaScript
- Logs and a stop switch
What bad looks like
- "It works in the preview" without production checks
- Tokens and webhooks left public
- No human handoff for exceptions
- Thin machine-translated pages sold as localization
How Dali handles this
Dali is an AI agent systems studio: we take vibe prototypes seriously, then harden them into production systems with gates, tools, and ownership. Related: production AI agents, approval gates.
FAQ
No. It is a fast way to get a working surface. It becomes dangerous only when it is treated as finished production.