Caseproof Internal Initiative

Revive a dead product.
Using only AI.

Buy Now Plus is a forgotten Stripe payment button service with real customers and zero investment. We’re rebuilding it end-to-end with AI agents to prove the model works.

$2-4K
Current monthly revenue
1
Human involved (Santiago, PO)
9
AI agents in the pipeline
Why this exists

We need to go all-in on AI. This is how we prove it works.

01
The mandate
2026 company direction: do more with less. AI is the lever. Every team needs to adopt it.
02
The question
How much can AI actually do? The team has valid concerns about reliability and speed. We need real data, not opinions.
03
The proof point
Take a real product, revive it with AI agents, measure cost and revenue. Let the numbers speak for themselves.
04
The vehicle
Buy Now Plus. Dead product, real customers, zero risk. The perfect test case.
What we found

Phase 1 audit complete. Bad, but recoverable.

!
Critical
  • Merchant tokens exposedcustomer.js:154 has a commented-out security fix. Stripe access tokens of merchants may be leaking to buyers via the buyer portal.
  • AngularJS 1.x, EOL 2021No upgrade path exists from AngularJS to any modern framework. The entire frontend must be rewritten regardless of approach.
  • Node.js 10, EOL 2021Cannot run on Heroku’s current stacks. Likely running on deprecated heroku-18. Every dependency update is a risk with zero test coverage.
  • Zero webhook processingThe webhook handler is a stub that returns 200 and does nothing. Failed charges and cancelled subscriptions go completely unhandled.
  • PCI compliance at riskNo Content Security Policy on any page. The update-card modal uses raw card input fields in the DOM instead of Stripe Elements iframes.
+
Solid
  • Stripe Connect model is correctPer-merchant account architecture is the right approach for a payment button platform. This is preserved in the rebuild.
  • Checkout uses Stripe ElementsCard data never touches BNP servers in the main checkout flow. Only the update-card modal is problematic.
  • No live secrets in repository
  • Clean, simple data model
  • $2-4K/month from existing customers
→
Decision
  • Rebuild from scratch
  • Preserve Stripe Connect architecture
  • Migrate buyer data incrementally
  • Old system runs in parallel until cutover
  • Frontend rewrite is unavoidableAngularJS has no migration path. Combined with Node.js 10 EOL and zero tests, rebuilding is cheaper than patching.
How it works

Nine AI agents. One human in the loop.

Three AI teams, working in parallel
Code Pipeline
4 agents
  • Code AgentWrites all production code on feature branches. Never commits to main. Test keys only.
  • Code Review AgentReviews every PR before it reaches Santiago. Read-only — flags issues, never modifies code.
  • QA AgentTwo-pass testing: Pass 1 finds all bugs, Pass 2 verifies all fixes. Only touches test files.
  • Security AgentScans for secrets, vulnerabilities, PCI risks. Blocks pipeline on critical findings.
Marketing
3 agents
  • Strategy AgentCompetitive research and market analysis. Writes planning docs, never publishes externally.
  • Content AgentBlog posts, landing pages, documentation. All output is draft — never publishes directly.
  • Website AgentBuilds in staging environment only. Production deploy requires full approval chain.
Monitoring
1 agent
  • Revenue tracking (MRR trend)
  • Agent cost per feature
  • Uptime and error rates
  • Weekly reports to Santiago
All output flows through the same review chain
95% of the effort
Agents produce
Code, tests, review, security scan
→
Arrives pre-tested
Santiago reviews
Read summary, approve or flag
→
Arrives pre-approved
Leadership sign-off
Final check on customer-facing output
→
 
Goes live
Nothing ships unsupervised
The plan

Eight phases. Sequential, no shortcuts.

Understand it
Done
  • Codebase + infrastructure audit
  • Security baseline
  • Build-vs-improve decision
Plan it
Next
  • Competitive analysis
  • Business model + pricing
  • Leadership pitch
Build it
Phases 3-7
  • Modern stack + agent pipeline
  • Webhooks + payment infrastructure
  • Buttons, dashboard, embed widget
  • Customer migration
  • Differentiating features
Ship it
Phase 8
  • Website redesign
  • Marketing + content
  • AI case study with real numbers
BNP Revival — Caseproof, LLC
Owner: Santiago Perez Asis
Repo: caseproof/buy-now-plus
March 2026