Can I run this routine myself?

Yes. Every item above has its test written out, so you can run it without us. Send us the results if you want a second pair of eyes.

Which is the most common gap?

We publish no statistics we have not measured. Run the five tests above; the ones that fail are your gaps.

Question: AI-built apps

How do I check an AI-built app is secure before real users touch it?

Builders asked for this routine on 2026-09-22 and 2026-09-24 (r/nocode on reddit.com): how to verify an AI-built app is secure before real users, with row-level security per table, the service key out of the frontend and storage buckets private.

Request a Pre-Flight Review See the six guardrails

Last updated 2026-09-26 · Agent Guardrail Desk, Denver, Colorado

Short answer

Run a fixed routine and prove each item with a test: row-level security on every table, no service key or secret in the browser, private storage buckets, validated webhooks, and a spend cap on any AI feature. A checklist says what to check; a test shows it holds.

The routine, with the test for each

Row-level security on every table. Test: sign in as one user and request another user's rows; the request must be refused.
No service key in the browser. Test: search the shipped frontend bundle for keys; none may appear.
Private buckets. Test: open a private file from a logged-out browser; it must be refused.
Validated webhooks. Test: send an unsigned or malformed payload; it must be rejected before any write.
A spend cap on AI features. Test: loop the feature on staging; it must stop at the cap.

Published prices, if you want help

Code audits for AI-built apps publish at $349 to $2,500 (vibe-audit.com ($349 Sweep), fortivibe.com ($499 Launch Audit), attributex.ai/services/vibe-coded-app-audit ($2,500 flat), all read 2026-09-26). The Pre-Flight for AI-Built Apps is $1,500 and adds the running parts: spend, stop and silent breaks.

Want it tested for you?

This test is one of six in the Six-Guardrail Pre-Flight. $1,500 per agent or automation, once. Delivered in 5 business days after read-only access to a staging copy.

See the Pre-Flight Review scope and price

Questions

Questions about this

Can I run this routine myself?: Yes. Every item above has its test written out, so you can run it without us. Send us the results if you want a second pair of eyes.
Which is the most common gap?: We publish no statistics we have not measured. Run the five tests above; the ones that fail are your gaps.

Every page links back to the Agent Guardrail Desk home page, where the price, the rulebook and the request form live.

The review, per situation

SituationPre-Flight for Agent BuildersEngineers shipping tool-using agents, multi-agent pipelines and MCP servers. The loop stops at the cap; the hidden instruction is refused or held for approval.SituationPre-Flight for AI-Built AppsFounders and makers shipping apps built with Lovable, Bolt, Cursor or Claude Code on Supabase. The request is refused; no service key ships to the browser.SituationPre-Flight for No-Code AutomationsOps owners running Zapier, Make or n8n flows from forms and webhooks into a CRM. The run stops and alerts instead of writing an empty record.SituationPre-Flight for Platform TeamsPlatform, security and ops leads whose internal agents can write to CRM, ticketing and docs. The write is refused; the agent's role grants only what its job needs.

Buyer questions, answered

QuestionHow do I cap what an AI agent can spend?Where a spend cap has to live, what it counts, and the test that proves it stops a loop.QuestionWhat should an AI agent kill switch actually do?The four things a kill switch must stop, who holds it, and how to prove it works.QuestionHow do I catch a renamed form field before it writes empty records?Silent breaks in automations: what to check before each write, and the test that proves it.

Price and sample

Start hereThe Pre-Flight Review: price, scope and timeline$1,500 per agent, report in 5 business days, credited in full against a Fix Sprint within 30 days.Start hereSee a sample Pre-Flight ReportThe report format, filled in for a placeholder agent. Demonstration, not a client result.HomeAgent Guardrail Desk: the Six-Guardrail Pre-FlightThe whole offer on one page: the six guardrails, the price, the rulebook and the form.

Next step

Request a Pre-Flight Review for one agent

$1,500 per agent or automation, once. Delivered in 5 business days after read-only access to a staging copy. If you book a Fix Sprint within 30 days, the $1,500 is credited in full against it.

Request a Pre-Flight Review See a sample report