Guides
Direct answers, reproducible examples, provider-aware distinctions, and an explicit line between public evidence and authorized testing.
Lovable · security scan
What Lovable’s built-in security tools cover, what an independent outside view adds after deployment, and which questions still require source or human review.
Updated
all stacks · launch checklist
A staged security checklist for AI-built apps: public deployment evidence first, then source-backed validation and human review for sensitive workflows.
Updated
Supabase · public keys
Why a Supabase anon or publishable key belongs in browser code, why service-role and secret keys do not, and what a free public-surface scan can classify safely.
Updated