Karpathy on vibe coding a full web app: 'messy for anything of importance'
The most honest account of the prototype-to-production gap.
Open x.com →A demo that works for you and a product that survives strangers are different animals: before launch you need real authentication, database rules, environment variables for secrets, error handling, and a deploy setup that separates test from production. Even Karpathy found that deploying his vibe-coded app was 'a painful slog' compared to the exhilarating prototype. Work through a production checklist, run the built-in security scans, and hand-walk every signup and payment path yourself before inviting users.
A quick orientation. The real value is below: resources worth your time, from people who've actually done it.
The most honest account of the prototype-to-production gap.
Open x.com →Exactly which 30% of the work you must still own.
Open addyo.substack.com →The checklist separating apps that survive launch from those that do not.
Open geminatesolutions.com →RLS, secrets, auth hardening, and performance in one sequence.
Open kaizenaiconsulting.com →How to package your project so a professional can take it over.
Open sourcetoad.com →Step-by-step scaling considerations for a real launch.
Open technologyrivers.com →The cleanest hosting migration path when you outgrow built-in deploys.
Open digitalapplied.com →Deployment mechanics explained for non-engineers.
Open vibeops.tech →Official videos covering domains, publishing, and go-live steps.
Open lovable.dev →Maps which parts of production readiness you can automate.
Open getautonoma.com →Learn from seven documented launch failures before yours.
Open getautonoma.com →Why dev and production environments must be separated, illustrated.
Open baytechconsulting.com →The post-launch failure modes to pre-empt this week.
Open clixlogix.com →An India-based team's framework for the prototype-vs-production call.
Open webyot.in →Where in the lifecycle AI code belongs, and where it does not.
Open tateeda.com →A clear-eyed answer to the exact question founders ask.
Open techvedhas.com →Argues for keeping prototypes disposable, and when to rebuild properly.
Open teacode.io →The production-security half of readiness, operationalised.
Open help.aikido.dev →