Burbot - CLI API Logic Auditor

Vibecoders move fast, but speed without safety nets create invisible risks. Standard AI development tools are excellent at generating code, but they consistently miss the logic gaps that matter most in production: unsecured admin endpoints, broken ownership checks, bypassed payment flows, and mass assignment vulnerabilities. Burbot is a CLI, persona-driven API logic auditor built specifically for vibecoders and AI-assisted developers who want to ship fast without shipping something broken. Burbot deploys five specialized audit personas: Alice, Bob, Eve, Mallory, and Charlie, with each targeting a distinct class of business logic vulnerability. Alice maps the legitimate user journey. Bob hunts for insecure direct object references. Eve attempts privilege escalation. Mallory probes for mass assignment flaws. Charlie breaks workflow sequence enforcement. Each persona follows a strict chain-of-thought workflow, operates in an isolated session, and feeds its findings into a Master Orchestrator that synthesizes everything into a structured JSON report with human-readable business impact summaries and AI-Fix Prompts that developers can act on immediately. Burbot is powered by IBM Granite via Ollama for local LLM access and NVIDIA NIM for cloud-based inference, with IBM Bob IDE as the core development partner.