Production write-ups, integration post-mortems, and the occasional opinion on what AI tools can and can’t finish.
Most agencies that have rebranded toward vibe-code rescue will not survive a serious technical interview. Here are the eight questions to ask, with the answer a production-engineering shop should give and the red flag patterns that disqualify a body shop.
Twelve specific failures show up on almost every Lovable, Bolt.new, Cursor, and Replit Agent codebase that lands on our desk for rescue work. Grouped by what actually breaks: data exposure, identity, reliability, operability. With the tool defaults and 2025-2026 evidence behind each one.
Public scans show 11% of vibe-coded apps leak Supabase keys. Here are the 6 RLS misconfigs behind 90% of them, with real SQL examples and the fixes.
