For apps that half-work — including ones built with Cursor, Lovable, Bolt, v0 or by a developer who has moved on.
What I do
Reproduce and fix: I reproduce the problems you're seeing, find the root cause rather than patching symptoms, and fix them.
Guard against regressions: each fix gets an automated test, and I set up CI if there is none.
Security pass: sign-in and sessions, whether one user can reach another user's data, secrets committed to the code, input validation and upload handling, rate limits.
Stability and speed: crashes from unhandled errors, broken streaming or websockets, duplicate submissions, slow queries and missing indexes.
For apps that half-work — including ones built with Cursor, Lovable, Bolt, v0 or by a developer who has moved on.
What I do
Reproduce and fix: I reproduce the problems you're seeing, find the root cause rather than patching symptoms, and fix them.
Guard against regressions: each fix gets an automated test, and I set up CI if there is none.
Security pass: sign-in and sessions, whether one user can reach another user's data, secrets committed to the code, input validation and upload handling, rate limits.
Stability and speed: crashes from unhandled errors, broken streaming or websockets, duplicate submissions, slow queries and missing indexes.