run.veric.dev

with & without veric

Same codebase, same AI-generated PR, two universes — one with veric on, one without.

MERGED#4127

feat(marketing): add email column to marketing export view

Ccursor-bot
branch: cursor/marketing-export-emailbase: mainopened: 3 hours ago“Cursor suggested adding this transformation; merged 3 hours ago.”
@@ models/marts/mart_marketing_export.sql @@
WITH events AS (
SELECT user_id, campaign_id, click_ts
FROM {{ ref('int_marketing_events') }}
)
- SELECT
- e.user_id,
- e.campaign_id,
- e.click_ts
+ SELECT
+ e.user_id,
+ u.email, -- needed for export.com integration
+ e.campaign_id,
+ e.click_ts
FROM events e
+ JOIN {{ ref('stg_users') }} u ON u.user_id = e.user_id
0 ms / 17.00 s

without veric

counterfactual / fabricated
  1. ·
    t=1.00 s

    PR #4127 opened

    1 approval · cursor-bot

  2. ·
    t=2.50 s

    CI passes

    ✓ 1,284 tests · 0 failures · existing tests don't cover the regression

  3. ·
    t=4.00 s

    Deployed to prod

    release-2026.05.04.r3 · all 7 dbt schedulers green

  4. ·
    t=9.00 s+ 2 days

    Pagerduty: marketing-export anomaly

    marketing_topic ingestion volume +312% over baseline

  5. ·
    t=11.50 s+ 2 days, 4h

    Customer support ticket #88241

    Enterprise customer: "why is my email visible to the marketing list?"

  6. ·
    t=14.50 s+ 2 days, 19h

    Postmortem published

    PII leaked into marketing topic via a derived view introduced in PR #4127. Root cause: `mart_marketing_export.email` joins `stg_users.email` with no PII gate. Action: rollback, add forbidden-flow rule, manual GDPR notification cycle.

downstream cost

GDPR notification, legal review, customer churn risk, on-call burnout. Postmortem closes; the underlying class of failure is unaddressed.

with veric

live timeline · dbt-warehouse

AI annotation stream (primitive A)

Initialising annotation stream…

Customer-rule status (primitive D)

  1. ·
    t=800 ms

    PR opens

  2. ·
    t=1.50 s

    AI swarm processes diff

  3. ·
    t=4.00 s

    Annotation: mart_marketing_export.email tag {pii: true}

  4. ·
    t=5.50 s

    Verifier accepts

  5. ·
    t=8.00 s

    Rule pii !-> marketing_topic — REFUTED

  6. ·
    t=8.20 s

    Counterexample path surfaced

  7. ·
    t=8.80 s

    CI fails

  8. ·
    t=9.20 s

    PR blocked

  9. ·
    t=9.70 s

    Auto-comment posted on PR

show forbidden-region lattice (primitive B)
Initialising lattice…