The CheckVibeCode Journal
Field notes for people who ship fast.
Security, SEO, AEO, and performance — written for builders who let an AI write the first draft and want to know what it left out.
The 7 security mistakes every vibe-coded app makes
AI page builders skip the boring parts. Here's the exact checklist we run against every site we scan — and the two mistakes that show up almost every time.
More stories
What is AEO? Getting your app cited by ChatGPT and Claude
Search is turning into answers. Here's what makes an AI engine quote your product instead of a competitor's — and how to check where you stand today.
Row Level Security, explained for people who didn't write the schema
You turned on Supabase, shipped a table, and moved on. Here's the five-minute mental model for RLS, plus the exact policy most vibe-coded apps are missing.
Your Lighthouse score lies. Here's what to check instead.
A 98 in DevTools and a 4-second mobile load aren't a contradiction — they're the same site. What Core Web Vitals actually measure, and how to read them.
The vibe coder's SEO checklist
You didn't write a sitemap by hand and that's fine. The dozen things an AI page builder leaves out that Google actually checks for.
