We Built an AI Agent That Intentionally Breaks Code to Fix It Before Hackers Do

We just wrapped up our submission for the IBM Bob 2.0 Hackathon!

Our team, Syntax and Synergy, built Resilix—an autonomous adversarial agent that tests code resilience and auto-generates defensive security patches before code hits production.

🚨 The Problem

Developers and AI models are writing code faster than ever. However, security testing tools are often built for slow, late-stage pipeline audits rather than active development. Unhandled null pointers, string overflows, and SQL injections frequently slip through under hostile edge cases.

🛡️ What Resilix Does

Resilix acts as a real-time defensive assistant:

Multi-Vector Payload Fuzzing: Analyzes code against SQLi, null pointer exceptions, buffer overflows, and malformed structures.
Dynamic Resilience Score: Deducts severity weights to calculate a instant 0–100 safety score.
Automated Defensive Patching: Generates copy-pasteable fixed code snippets alongside detailed risk breakdowns.
Chaos Dashboard: A clean, dark-mode web UI for instant local testing.

🧰 How We Built It with IBM Bob 2.0

The entire application was built inside the IBM Bob 2.0 environment:

Plan Mode: Structured our microservice architecture, API endpoints (/api/fuzz), and scoring formulas.
Agent Mode: Generated our Flask server logic (app.py) and single-page interactive UI (index.html).
Workspace Context: Maintained rules across .bob/rules-* and tracked all execution logs in bob_sessions/.