I think this is inevitable, and I'm trying to find ways to set up a controlled environment, in which we build a robust safe and isolated foundation, while clients can mess around and vibe-code their features on top of that. I'm still figuring it out so feel free to share ideas.

Why would a standard git flow not work? They can vide code whatever they want, just review it before it is merged.