UnknotRequest a review

Built your app with AI? Get a developer’s second opinion before launch.

AI tools like Lovable and Cursor are brilliant at getting your app working in the preview. They’re much less reliable at what happens beneath the surface—payment edge cases, server boundaries, and database permissions.

I test your critical customer journeys and inspect the code behind them, so you know what needs fixing before real customers start paying—and what can safely wait.

An independent review by Christian Robinson.

£299 one-off

A focused review of two or three core customer journeys, delivered as a written report within three working days.

Scope and start date agreed by email before payment. No technical brief or call needed.

See what should block launch.

When you test your own app, you follow the happy path. Real customers close tabs, lose signal on mobile, or refresh mid-checkout.

Illustrative example—not a client case study.

  1. checkout.payment-provider.com
    Payment succeeds

    Customer’s card is charged.

  2. Redirects back to your app

    01 Customer closes browserbefore the return page loads.
  3. yourapp.com/confirmationSkipped
    Return-page codecreateOrder()Never runs
    Orders table
    Order IDPayment
    No order recorded

01 Payment succeeds, but closing the browser skips the step that records the order.

Open figure

01 Address before launch

Where
src/routes/confirmation.tsx (no webhook server route or edge function configured)
Finding
Order creation only runs when the customer’s browser loads the confirmation route after checkout.
Why it matters
If a customer pays and closes their browser—or loses mobile signal before the redirect finishes—their card is charged, but no order is created in your database.
Recommended next step
Move order creation out of the confirmation page and into a server-side webhook (a TanStack Start server route or Supabase Edge Function) triggered directly by the payment provider. Verify the webhook signature and ignore duplicate events.

A focused review. A clear order of work.

The journeys your launch depends on.

We pick two or three core flows—typically sign-up and auth, checkout and billing, or your main product workflow. I test the live app like an unpredictable user and trace how the code handles each step.

The blind spots AI tools leave behind.

Whether your app runs on Lovable’s TanStack Start stack, Vite, Next.js, or Supabase, I check the boundaries AI often gets wrong: sensitive logic running in the browser instead of a server function, missing Row Level Security (RLS) policies, exposed keys, and unverified webhooks.

Plain-English priorities for your AI tool.

Each finding shows the exact file or setting involved, why it matters in plain English, and the technical change required—written clearly so you can work through it with Lovable, Cursor, or a developer.

This is a focused review of agreed customer journeys, not an exhaustive audit of your entire codebase.

I’m Christian. I’ll review your app myself.

Portrait of Christian Robinson
Christian Robinson

I build and maintain production web software, including healthtech applications and integrations that handle sensitive customer data. Because my day-to-day work is on live systems, I focus on the practical edge cases—around payments, auth, and data—that only show up once real users arrive.

The aim isn’t to judge how your app was built or produce the longest list of minor faults. It’s to explain what could break your launch and how to fix it.

From enquiry to clear next steps.

  1. Describe your app.

    Tell me what your app does, your next milestone, and which flows you’re most unsure about. I’ll reply within one to two working days to confirm a review is a good fit.

  2. Agree the review.

    We confirm the journeys to test, the access needed (usually a preview/staging link and GitHub repo), and your start date by email—then I send a private payment link.

  3. Receive the report.

    Within three working days of the agreed start date, you receive your written report and prioritised action plan, plus a round of email follow-up to clarify any questions.

Before we start.

Why not just ask Lovable, Cursor, or Claude to review my code?

AI tools can review code and run tests. I bring an independent developer’s perspective by testing the live behaviour against your actual routes, database permissions, and payment integrations. I check how those parts work together, where a working preview can hide launch-blocking bugs.

Will you fix the problems you find?

The £299 review covers diagnosis and a clear action plan. Each finding points to the exact files or settings and the changes needed, so you can work through the issues by prompting Lovable or Cursor with my notes. If you’d rather have me implement the fixes, we can quote and agree that separately after you see the report.

What access will you need, and how will you handle my data?

Usually a link to your staging or live app and read-only access to your GitHub repository, which Lovable can sync for you. Before starting, we agree how your code and data are handled, including their use with AI tools. I use AI tools to help navigate large codebases, and I personally verify every finding and recommendation.

Can you help if my app isn’t finished—or already has customers?

Both are fine, as long as the journeys we agree to review can be clicked through and tested. A review can be useful right before turning on live payments, or shortly after your first users sign up.

Does the review guarantee my app is completely safe to launch?

No focused review can guarantee every part of an app is defect-free or replace a formal security certification. What it gives you is practical engineering evidence on your highest-risk journeys—and clear honesty about what I checked, what I found, and any limits I couldn’t verify.

What are you launching?

Tell me briefly what your app does and when you’re planning to launch. I’ll check that a focused review would be useful and reply by email.

£299 one-off

No payment is taken now. We agree scope and dates by email first.

Preview, staging, or live link. Leave blank if you don’t have one yet.

For example: Lovable, TanStack Start, Cursor, Supabase, or Stripe.

A short description of what your app does and what you’d like checked. Please don’t include passwords, API keys or sensitive customer data.

I usually reply within 1–2 working days.