Blog
What we actually find inside AI-built apps, how we fix it, and the checks you can run yourself before hiring anyone. Written by the engineers doing the work, not a content team.
The rejections we see most on React Native and Expo submissions, the guideline numbers behind them, and the checklist we run before pressing Submit so review takes days, not weeks.
4 min read
Replit Agent apps are more portable than people fear. The order of operations we use to move one to your own repo, Postgres and hosting: what to swap, what to keep, and how to cut over with a rollback.
4 min read
AI-built apps usually mark users as paid on the success page and never listen to Stripe again. Four failure modes, the Stripe CLI test that exposes each one, and what a reconciling integration looks like.
4 min read
Supabase service_role keys, Stripe secrets and OpenAI keys end up in the browser bundle more often than you'd think. How to find them on your own live site, and how to rotate them safely.
4 min read
The five row-level security failures that show up in almost every Lovable, Bolt and Cursor build, why the AI makes them, and the two SQL queries that expose them in ten minutes.
4 min read
What a senior engineer actually checks before a Lovable, Bolt or Replit app takes real users: RLS, keys, auth, Stripe, deploys. With the exact commands to run yourself.
4 min read