Launch checklist for AI-built apps. The checks we run first on every Ship Check.
Written so you can do them yourself before launch.
What’s inside. Ten checks, in the order we run them.
- Secrets: no API keys in the frontend bundle or the repo.
- Database access rules: every table locked down (for Supabase, RLS on every table, tested with two different users).
- Auth: password reset, email change and session expiry work; no account takeover via predictable URLs.
- Payments: webhooks verify signatures; failed and duplicate payments handled; test mode off in production.
- Checkout and critical flows: tested end to end, including the last item in stock and discount codes.
- Errors: logged and alerted, not swallowed.
- Performance: main pages load fast on mobile.
- Accessibility basics: keyboard navigation, labels, contrast.
- Backups and rollback: you can restore data and roll back a release.
- Monitoring: you’ll know when checkout, login or signup breaks.
Get the checklist
We email it to you. One email every two weeks after that; unsubscribe any time.