Put your app in front of real people

What you need first

Go through your own app once as a stranger would before you press anything.

• Every page clicked through, with no placeholder text left.
• Forms tested by sending one yourself.
• For Korean commerce, the business details in the footer filled in.

01 · Know which address is which

The preview address is for you and anyone you send it to. It changes as you work. Publishing takes the version you are looking at now and puts it somewhere stable, so a later experiment does not change what customers see.

02 · Read the pre-publish check

Nine checks run over the source and the built result. They are not advice; a critical finding stops the publish.

• Credentials left in the source
• Data access rules and open write policies
• Powerful database functions and blanket grants
• Logins on protected screens
• What gets stored in the browser
• Links, embedded frames and dynamic code
• Connectors that are not finished
• The managed dependency boundary
• Credentials in the built result, scanned after the build

03 · Fix what it found

Each finding says which file and what to change. Ask the AI to fix it, or fix it yourself in the code editor. Read the finding before you accept a fix — it is your app that goes out.

04 · Run the check again

A clean rescan is the only thing that lifts the block. Editing an unrelated file does not, on purpose: otherwise anyone could clear a serious finding by changing a comment.

05 · Publish, then look at it as a visitor

Open the published address in a private window on a phone. Check the pages load, the forms send, and the footer says who you are.

If you get stuck

It says I am blocked but the list looks empty. Dismissed findings are hidden from the list but still counted by the gate. The screen tells you how many are hidden. Dismissing is for tidying your view, not for unlocking publishing.

I fixed it and it is still blocked. Run the scan again. The block is based on what the last scan saw, not on whether the files have changed since.

Can I publish and fix it after? Not for critical findings. They are the ones that leak other people's data, and there is no version of that which is fine for an hour.