---
title: "Apps built with AI builders · Agent Wranglers"
url: https://agentwranglers.se/playbook/ai-assisted-development/apps-built-with-ai-builders
updated: 2026-10-20
licence: "All rights reserved"
---

# Apps built with AI builders

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

> App builders such as Lovable, Bolt, Replit and v0 ship working apps fast. Lock down the database, keep keys server-side and own the code.

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers ai development playbook: https://agentwranglers.se/playbook/ai-assisted-development/apps-built-with-ai-builders`.

## Required

- [Turn on row-level security for every table](https://agentwranglers.se/playbook/ai-assisted-development/apps-built-with-ai-builders/row-level-security): When the browser talks to the database directly, turn on row-level security for every table and write a policy for each action.
- [Keep secret keys on the server](https://agentwranglers.se/playbook/ai-assisted-development/apps-built-with-ai-builders/server-side-keys): Never ship a secret key in code that runs in the browser. That covers database secret or service role keys, payment secrets and AI provider keys.
- [Check every sign-in and permission flow](https://agentwranglers.se/playbook/ai-assisted-development/apps-built-with-ai-builders/check-auth-flows): Test sign-up, sign-in, password reset and every admin page as a stranger and as a normal user before launch.
- [Own the code in your own repository](https://agentwranglers.se/playbook/ai-assisted-development/apps-built-with-ai-builders/own-the-code): Keep the app's code in a repository you control, and make sure you can build and deploy it without the builder.

## Recommended

- [Add tests and checks before the app grows](https://agentwranglers.se/playbook/ai-assisted-development/apps-built-with-ai-builders/checks-before-growth): Once users depend on the app, add tests and a check command before adding more features.
- [Know when to move off the builder](https://agentwranglers.se/playbook/ai-assisted-development/apps-built-with-ai-builders/know-when-to-move): Plan to move to a normal development setup when the app outgrows the builder. Complex permissions, background jobs and many developers are common signs.

- Previous: [Safety and permissions](https://agentwranglers.se/playbook/ai-assisted-development/safety-and-permissions)
- Next: [Context and memory](https://agentwranglers.se/playbook/ai-assisted-development/context-and-memory)
- [All chapters](https://agentwranglers.se/playbook/ai-assisted-development)