Decide if an agent should build your auth stack
Your task
Your 6-person startup builds its product in Node and TypeScript. It launches in 2 weeks and still needs signup, login, password reset, sessions and MFA (a second login step, such as a code from an app). The team wants an agent to generate the whole auth stack from scratch tomorrow, "so we own it".
Do you let the agent build it? Decide what the agent may do, and defend the call.
It covers
- When not to use
- Security
- Ambiguous requirements