FeaturedLaunch
Lovable to production: what to fix before you launch
Lovable gets you a working app in an afternoon. Here is what still stands between that and a launch you can charge money for, in the order it matters.
6 min read
Read the postField notes
Taking AI-built apps to production
What actually breaks between a working prototype and a real launch — security holes, performance cliffs, and the checklists we run to close them.
Browse by topicAI CodeSecurityProductionLaunchPostgresSupabaseAPI KeysBoltBudgetChecklistCursorDebuggingDeployHostingLovableMigrationNetlifyNextjsPricingRefactoringReplitRLSSecretsServer ActionsTestingV0
RSSAll 9 posts
Production engineering
Cursor keeps breaking your codebase. Here is how to stop it
Every Cursor session brings its own idea of your architecture, so the codebase drifts one prompt at a time. How to measure the drift, undo it, and write rules that keep the next session in line.
8 min read
Production engineering
v0 Server Actions are public endpoints. Here is how to secure them
Every Server Action in a v0 project can be called by anyone on the internet with any arguments, whatever your UI shows. Here is what that means and the four checks each one needs.
4 min read
Production engineering
Replit to production: what to keep, what to move, and when
Replit Agent builds and hosts your app in one place. Here is how to tell whether that still fits once real users arrive, what to fix regardless, and how to move the database or the hosting without losing anything.
5 min read
Production engineering
Bolt.new works in preview and breaks in production: the five causes
Your Bolt app runs perfectly in the editor and fails the moment it is deployed. It is nearly always one of five things. Here is how to tell which, and the fix for each.
6 min read
Security
The 5 Supabase RLS mistakes we find in almost every AI-generated app
AI coding tools scaffold Supabase beautifully and secure it badly. Here are the five Row Level Security holes we find in nearly every prototype, the exact SQL that closes them, and how to prove a policy works.
5 min read
Security
Your AI app is leaking API keys. Here is how to find them
AI coding tools put secrets in the browser because it makes the error go away. Here is the five-minute audit that finds them, and the right order to fix one.
5 min read
Playbooks
The launch checklist we run before any AI-built app goes live
The checklist we work through on every Gen2Prod engagement, covering security, data integrity, observability, performance, resilience, and release hygiene — ordered by consequence rather than by effort.
4 min read
Business
What it costs to make an AI-built app production-ready
Real ranges for the work between a working prototype and a launch you can charge for, what moves the number, and how it compares to hiring or rebuilding.
5 min read