SimpleBeacon

Turn AI Code Debt Into Audit Evidence Before Regulators Find It.

SimpleBeacon is an automated code reviewer for GitHub pull requests. Production-path alerts stay on the main dashboard; test/mock/fixture findings move to Test Suite Health.

payments.py — looks like normal production code
PAYMENTS_URL = os.getenv(
    "PAYMENTS_URL",
    "https://mock-payments-stage.example"
)

Tests pass. The application works.

But production can silently use a test payment system.

SimpleBeacon

CRITICAL — Production fallback points to staging payment infrastructure.

Tests tell you whether code works. SimpleBeacon checks whether it works against the reality you intended.

Install the VS Code extension Scan a repo

It compiles. It passes tests. It can still be wrong.

Your AI coding agent can make your tests pass—and still wire production to the wrong reality. Existing tools tell you whether the code works. SimpleBeacon checks the assumptions underneath it.

✓ Compiles
✓ Tests pass
✓ API returns 200
Production talks to staging

Can you spot the problem?

analytics.js — looks like demo code
const METRICS_DATA_PATH =
  './fixtures/sample-metrics.json';

const conversionRate = '75%';

Most developers: “It’s demo code.”

This code is in a production handler.

SimpleBeacon

CRITICAL — Production sample-data dependency

CRITICAL — Hard-coded KPI

That’s what SimpleBeacon is for.

What we catch

The dangerous generated code isn’t ugly. It’s believable code that isn’t true.

Wrong environments

Staging or mock infrastructure wired into production fallbacks and defaults.

Fake state

Fixtures or fabricated metrics presented as live data in production handlers.

Incomplete behavior

Placeholders and no-op implementations that look finished and ship anyway.

Hallucinated dependencies

APIs and packages that don’t actually exist, with completely reasonable names.

How it works

  1. AI writes code
  2. SimpleBeacon scans locally
  3. Reality gap detected
  4. Developer fixes it
  5. Commit

Runs locally. Your source stays in your environment.

When you need a paper trail

If you need evidence of how you control AI-generated software, SimpleBeacon produces an audit trail of what it found, what was fixed, and when it was fixed. That’s a verification report—not a compliance certificate.

See it on your repo

Scan locally. No upload required.

Install the VS Code extension Scan a repo