An ongoing series · started June 2026
1
prompt
Prompts That Ship
One prompt per production setup. One afternoon to ship. A permanent system at the end — every time.
Discovery-first phasing, anti-patterns named upfront, verification built in — the prompts that took shipped systems from idea to deployed in one sitting. New entries land as new prompts get battle-tested.
- 01Your GA4 Doesn’t Know Where You’re Losing CustomersPageviews tell you traffic. Funnel reports tell you where the business is leaking.
- 02Your Stripe Key Lives in Six Places25–40 production secrets, six stores, zero inventory — until a 4-hour audit.
- 03The Security Scanning StackSix scanners, one dashboard, zero GitHub bill — with the cadence figured out.
- 04Your Security Scanner Can’t See Your CORS ConfigThe 12-category OWASP review scanners can’t do — with a reusable skill at the end.
- 05Rate Limiting Without Redis or Cloudflare ProSliding-window counts in Postgres — the throttle that holds under concurrency.
- 06Your Supabase Project Is Flying Blind on PerformanceSlow query logging, per-route attribution, the MCP wired in — what Supabase ships without.
- 07Your Playwright Suite Might Be Quietly Burning Your Sender ReputationThe env-gated dry-run guard that stops CI from sending real emails through Postmark.
- 08Your 3rd-Party Integrations Don’t Leave ReceiptsOne log line at every boundary crossing — the audit log that answers “did this go through” in 30 seconds.
- 09Your App Doesn’t Remember What Anyone Actually DidThe per-tenant activity feed — one table, one helper, four triggers, two read surfaces.
- 10Stop Finding Bugs From ScreenshotsNext.js error capture across all four sources, into CloudWatch, under $1/month — no Sentry.