The Pre-Launch Checklist for AI-Built Apps
Don't ship broken. Run through these 30 checks before going live.
Authentication
- [ ] Registration works and sends verification email
- [ ] Login works with correct credentials
- [ ] Login fails gracefully with wrong credentials
- [ ] Password reset flow works end-to-end
- [ ] Logout clears session
- [ ] Protected routes redirect unauthenticated users
Security
- [ ] RLS enabled on all Supabase tables
- [ ] RLS policies are restrictive (check each one)
- [ ] No API keys in client code
- [ ] Environment variables properly set
- [ ] CORS configured correctly
Performance
- [ ] Lighthouse score above 80
- [ ] Images are optimized
- [ ] Lazy loading implemented
- [ ] No render-blocking resources
Design
- [ ] Responsive on mobile (375px)
- [ ] Responsive on tablet (768px)
- [ ] Consistent spacing and typography
- [ ] No horizontal overflow
SEO & Meta
- [ ] Title and meta description on every page
- [ ] Open Graph tags set
- [ ] sitemap.xml exists
- [ ] robots.txt configured
Functionality
- [ ] All core features work
- [ ] Error states display properly
- [ ] Loading states show correctly
- [ ] Empty states have appropriate messaging
- [ ] Forms validate input
- [ ] Links don't 404
