Dev.to
7/13/2026

The original title is: "A Vibe Is Not a Verdict: I Built a Tool That's Allowed to Say 'I Don't Know'"
Original: A Vibe Is Not a Verdict: I Built a Tool That's Allowed to Say 'I Don't Know'
Short summary
The author built KiloCheck, an offline IP-reputation engine in Rust that cryptographically verifies threat data and makes zero network calls during checks. When tested against a suspicious recruiter email, the tool returned 'unknown' rather than confirming the author's bias — demonstrating that a tool's honest 'I don't know' is valuable precisely because its confident 'yes' carries weight. The post argues that tools must distinguish between safe, bad, and unknown states rather than collapsing them to please the operator.
- •KiloCheck is a 12MB offline Rust binary that checks IPs against a signed local threat index with no network calls
- •When tested on a suspicious recruiter link, it returned NOT_OBSERVED instead of confirming the author's gut feeling — by design
- •The tool distinguishes five states (missing, unknown, stale, incomplete, unsafe) and refuses to fabricate verdicts under operator pressure
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



