HackYeah 2026 ReviewBezpieczna Aura
MakeNoMistakes · Bartekkur1/MakeNoMistakesTeam
Council score
Median of 3 models, weighted by the task's official criteriaA genuinely built, tested and deployed child safety platform whose honest privacy first design and complete escalation pipeline earn its place in Defence, tempered by an undemonstrated degraded scenario, narrow Polish only detection, demo grade authentication and an undisclosed AI assisted workflow.
A real, well researched gap, the Roblox scam wave with cited NASK and CERT data, tackled with a fresh combination: one brainrot mascot spanning a training mission, a live check widget and a privacy preserving escalation chain. The team itself admits security games for children exist, so the novelty is the combination rather than the category, which caps the score.
Members disagree here: scores range by 2.5 points.It maps directly onto the brief's message verification and security procedure directions, with a full escalation path to CERT, Roblox and Dyżurnet and grounding in the Kamilka Act school obligation. The degraded conditions emphasis is handled in design, an offline capable widget and a teacher pack that needs no computers, but never demonstrated, so it stops short of the top.
Members disagree here: scores range by 4.0 points.The widget is usable at the moment of incident, the printable three lesson teacher pack runs without computers, and the schools obligation gives a real adoption driver. The full parent flow needs local Supabase credentials and a manually loaded unpacked extension, so it is not zero setup for a judge.
Members disagree here: scores range by 2.5 points.A coherent token system derived from the mascot, colour coded severity, glanceable statuses and accessibility handled in code with dialog roles, focus management and aria busy. Only 5 of 29 screenshots are described, so visual polish is only partially evidenced.
The core claims exist in code: heuristic detection, role scoped report workflow APIs with concurrency handling, a secret headered idempotent Roblox ingest endpoint, 575 tests, a buildable extension zip and a live deployment. Demo grade authentication and a Roblox mission that cannot be verified from the pack keep it below the highest score.
Members disagree here: scores range by 4.0 points.Strengths
- The escalation pipeline is implemented end to end, not mocked: extension submit to parent panel to teacher escalation to state transitions, backed by validated API routes, database migrations and a secret headered idempotent Roblox ingest endpoint.
- Detection is honest and privacy first: local rule based hints in check.js surface signals and never declare a message safe, and nothing leaves the device without the child's explicit send.
- Evidence hygiene is exceptional: 575 tests across 58 files, cited sources behind every statistic, and an open admission that efficacy is unmeasured plus a controlled pilot plan.
- It is deployed and packaged: a live site at bezpieczna-aura.pl, an auto built extension zip, and a classroom ready offline teacher pack grounded in the Kamilka Act obligation on schools.
Weaknesses
- The brief's degraded conditions emphasis is designed for but not demonstrated: the live URL serves only the static landing page and no outage, stale data or resource scarcity scenario is shown, even though offline send states are reconciled in sw.js.
- Verification takes local setup: tracing an alert end to end needs local Supabase credentials and a manually loaded unpacked extension, and the Roblox mission needs Roblox Studio, with no recorded gameplay or video in the evidence pack despite being described in the form and deck.
- Detection is narrow Polish keyword and regex matching that will miss most real world phrasing, and authentication is demo grade with one shared 0000 code and hardcoded accounts.
- Heavy AI assisted development is evident throughout the repo, in agentic plan files, session handoff notes and MCP setup, but the submission form does not explicitly disclose AI tool use.
claude:glm-5.3-flash81.590% agreedots-studio/dots-3-note-preview:free82.590% agreeinclusionai/ling-3.0-flash-sante:free59.040% agreeclaude:glm-5.3–judgeThe council, the evidence pack, the prompts and the queue are all on GitHub. If a review helped you, a star helps other teams find it.