FIELD NOTES
Notes from real audits.
Engineering notes from anonymized audits and sprints. What breaks, how often, and how we fix it. Ships through CI, like everything else here.
START HERE2026-08-12
What we found auditing 30 AI-built apps
Aggregate findings from 30 audits: what breaks, how often, and why none of it means your prototype was a mistake.
SECURITYAI-CODEGEN
2026-07-28The five security holes in almost every Lovable exportClient-side keys, open endpoints, and three subtler ones. Each with its 20-minute fix.SECURITY2026-07-09Harden or rebuild: how we decide in 48 hoursThe decision tree we run on every audit, and the two signals that matter more than everything else combined.ARCHITECTURE2026-06-17Postmortem: the launch that paged us four times in one nightAnonymized and shared with the founder's blessing. What paged, why, and the two fixes that ended it.POSTMORTEM