July 21, 2026
The checklist before opening your app to its users
Before opening an AI app to users: server-side keys, database access, authentication, backups, domain ownership, monitoring and GDPR.
// the blog
The blog
Evidence-based answers to the questions that arise when an AI-built app starts to matter: security, ownership, architecture, costs and production.
July 21, 2026
How much does strengthening an AI-built app cost?
Four factors determine the cost of strengthening an AI-built app: code condition, dependencies, service expectations and compliance constraints.
July 21, 2026
Exporting your app to GitHub: what the repository actually contains
A GitHub repository protects the code of a Lovable, Bolt, v0, Replit or Base44 app. Learn what it contains, what remains elsewhere and what to verify.
July 21, 2026
My Lovable app works: what should I verify before opening it up?
Before opening a Lovable app: access rules, authentication, account ownership, backups, ability to scale and operational handover.
July 21, 2026
When should you audit an AI-built app? Six useful signals
Your Lovable, Bolt, v0, Replit or Base44 app works. These six situations show when a technical audit becomes useful, without waiting for an outage.
July 21, 2026
Supabase and your database: understanding who can read what (and fixing access)
Supabase RLS rules protect your data. Learn how to check them in five minutes, spot three common AI app traps and correct them safely.