Show HN: I built an OSHA compliance SaaS for oilfields using only LLMs

I’m a marketer (6 years in SaaS) who spent the last year learning to build software using purely AI assistance ("vibe coding"). I just shipped my first production app for the Oil & Gas industry.

The Product BasinCheck (https://basincheck.com) replaces the clipboard/Excel workflow for Safety Managers in the Permian Basin. It handles offline audits, hot work permits, and automates OSHA 300 logs.

The Stack

Next.js (App Router): Monorepo setup lets me spin out features as standalone free tools for SEO/lead gen.

Supabase: The path of least resistance for backend/auth.

Resend: For all transactional/marketing emails.

Stripe: Stuck with the standard despite the Polar/Lemon Squeezy hype. The SDK coverage made it easier for LLMs to generate reliable integration code.

AI: Used for parsing incident descriptions to suggest OSHA codes. Hard rule: AI is read-only/suggestion mode. A human (Safety/HSE manager) must approve every classification.

The "Vibe Coding" Reality Check

The biggest lesson so far: AI leaves logic gaps. I asked the AI to "alert me on new signups," which it did—for email/password forms. I missed my first real user for 5 days because the AI didn't intuitively know to hook those same alerts into the Google OAuth callback.

Fix: Moved logic from client-side to Postgres triggers on auth.users to catch everything at the DB level.

Happy to answer questions on the prompting workflow or the "boring" industrial tech stack.