Launch
Lovable to production: what to fix before you launch
Lovable gets you a working app in an afternoon. Here is what still stands between that and a launch you can charge money for, in the order it matters.
6 min read
Newsletter
Production notes
A monthly email about what breaks between a working AI prototype and a real launch — the security holes, the performance cliffs, and the exact fixes we ship. Written for founders who are shipping, not for a mailing list.
Get the next issue
What you get
The bugs we found this month
Anonymised findings from real audits — the RLS hole, the N+1, the key in the bundle — and the diff that fixed each one.
Copy-paste fixes
SQL, config, and code you can run against your own project the same day, not advice to go and read a spec.
Launch checklists
The lists we work through before signing off a launch, updated as we learn what actually catches problems.
No pitching
If you want to hire us there's a button for that on every other page. This is the useful one.
- We never sell, rent, or share your address.
- Every email has a one-click unsubscribe, and we honour it immediately.
A sample of the writing
Security
The 5 Supabase RLS mistakes we find in almost every AI-generated app
AI coding tools scaffold Supabase beautifully and secure it badly. Here are the five Row Level Security holes we find in nearly every prototype, the exact SQL that closes them, and how to prove a policy works.
5 min read
Security
Your AI app is leaking API keys. Here is how to find them
AI coding tools put secrets in the browser because it makes the error go away. Here is the five-minute audit that finds them, and the right order to fix one.
5 min read