Pipeline
.md
Your code works. But is the product ready for real people and money? The agent walks the project through 16 stages to prod — and won't let it move on until security, tests and analytics are closed.
The agent leads
— 05 Security: no attack on prod was run;
— 09 Analytics: onboarding events aren't tracked.
Start with security? Here's the ready-made prompt from stage 5.
Not a rehash of blog posts: every stage has a closing criterion, not a checkbox. The full stage map is open in the free version — check it before you buy.
Rushing to deploy past security, tests or analytics — the agent stops and hands you the ready prompt for that stage.
Holes are found in everyone. The money-safeguards playbook turns a found hole into a $0.02 loss, not the whole till.
What's inside Pro
The free version tells you which stages to pass. Pro gives you the material that closes them.
The same 16 stages, but with expanded audit criteria in each — twice the text of the free version.
Ready wording for the agent: what to do, what to verify, what counts as closed. Plus a contract you paste once so the agent can't cut corners.
Amount tampering from the front, double-spend, forged webhooks, overflow, rounding tricks, promo-code abuse, withdrawing more than the balance, IDOR, "cancel + credit" races. Each with a safeguard and a way to verify it holds.
Supabase RLS, secrets and the client/server boundary, e2e on Playwright, an analytics event scheme, a safe AI proxy, an idempotent money webhook.
Architecture, secrets, payments, security, analytics, production readiness — in detail. Including two stories where a hole was found before it cost money.
A Claude Code skill, a plugin, a Cursor rule and a PDF walkthrough. Three install tracks — Claude Code, Claude.ai, Cursor.
Free · Pro · Audit
Author
Oskar Makarov — indie developer. The 16 stages aren't distilled from articles — they're what I tripped over myself: a SaaS, a real-money game, an algo-trader. You don't have to take my word for it — the stage map is open in the free version, look before you pay.
The value isn't the text — it's the order: what comes first and what you can't skip. And it's wired into the agent, not forgotten a week after reading.