Guides
Starter notes for founders who ship often and find out from customers when signup or checkout breaks.
2026-10-22
Lovable signup not working: how to catch it before your users do
A Lovable app can ship a broken signup page between deploys. Here is a plain-English flow check that fails when the path does.
2026-10-22
Bolt checkout broke after a deploy: run the path on every push
Checkout is a chain of redirects. One renamed button after a Bolt deploy is enough to stop revenue. Monitor the path, not the homepage.
2026-10-22
Supabase anon key in the browser: what is safe, and what is a leak
The anon key is supposed to be public. The service_role key is not. The difference is row level security, and you can check it without writing data.
2026-10-22
Security headers for apps built with Cursor, v0, and Replit
Generated apps often ship without HSTS, a frame policy, or a content security policy. The headers are a small diff. The missing ones are how a login page gets framed.