Can I vibe code Forter?

You are building an open-source real-time fraud scoring API and JS SDK for e-commerce checkouts to replace the technical decisioning engine of enterprise fraud platforms like Forter.

CORE ENGINE COMPONENTS:
1. Client-Side Fingerprint JS SDK (browser-script.js):
   - Collects browser signals: Canvas fingerprinting, WebGL renderer, AudioContext, webRTC local IPs, navigator screen/language/plugins, battery status, and device memory.
   - Measures behavioral timing: keypress velocity, mouse movement jitter, and form field focus order.
   - Generates a deterministic device_hash and a session_token sent via HTTP headers on checkout POST.

2. Fraud Decisioning API Service (FastAPI / Python):
   - Endpoint: POST /v1/evaluate
   - Accepts transaction payload: cart items, billing/shipping address, customer email, phone, IP address, device_hash, payment card BIN, and order total.
   - Integrates IP Geolocation and Proxy Detection (e.g., MaxMind Precision / IPQS API) to check for VPN, Tor, residential proxies, and datacenter IPs.
   - Runs BIN Lookup (e.g., Handshake/Binlist API) to verify card issuing bank country vs. shipping country vs. IP location.
   - Velocity Rule Engine: Executes Redis sliding-window counter queries to detect:
     a) Multiple distinct credit cards used by the same device_hash in 1 hour.
     b) Multiple distinct shipping addresses linked to one email within 24 hours.
     c) Unusually high order values relative to merchant baseline.

3. Rule & Decision Matrix:
   - Output structured JSON:
     {
       "action": "APPROVE" | "DECLINE" | "CHALLENGE_3DS",
       "risk_score": 0-100,
       "reasons": ["IP_PROXY_DETECTED", "GEO_MISMATCH", "CARD_VELOCITY_HIGH"]
     }
   - Strict execution requirement: Evaluates all rules within < 150ms total SLA.

EXPLICITLY OUT OF SCOPE:
- Financial chargeback reimbursement/insurance payout features.
- Payment gateway settlement logic.

SCHEMA REQUIREMENTS:
Construct PostgreSQL models for Transactions, Rules, DeviceIdentities, and Blacklists using SQLAlchemy async. Implement unit tests verifying velocity checks in Redis. Write full runnable code with zero placeholder pseudo-code.

$ each button prefixes agent-specific run instructions · build your own product, never copy proprietary code, trademarks or designs