Writing

Notes from the build,
not from the pitch deck.

What things actually cost, what production actually requires, and what we would tell you on a call before you spent any money. No listicles.

LatestAI-built apps

Your Lovable or Claude-Built App Is Not Production Ready Yet: The Checklist

The security, auth and deployment gaps in AI-built apps, what Supabase row level security actually needs, and how to tell if yours is safe to launch.

6 min read
In short

An app built with Lovable, Claude Code, Bolt or Replit is usually functional but not safe to launch. The four gaps that show up almost every time are missing or permissive Supabase row level security policies, API keys exposed in client-side code, no server-side validation behind the UI checks, and no backup or deploy process. You can check all four yourself in about an hour, and the row level security one is the gap that actually leaks customer data.

Read the full post

Rather just ask us directly?

Tell us what you're trying to build. We'll scope it with you in a 30-minute call, free.