ANADI THAKUR
← ALL CASE STUDIES

THE PRODUCTION KIT

The production rules AI coding tools skip, written down

TYPE
PERSONAL PROJECT
ROLE
Solo: rules, skills, templates, delivery
TIMELINE
Sep 2026
PLATFORM
Web
STACK
Claude Code skills · Cursor rules · React · Next.js · Supabase · Stripe · Resend

The problem

People building with AI tools ship what the tool writes, and the tools skip the same things: row-level security, where keys live, auth redirects, server-side checks. Nothing in the demo shows it.

The fixes are well known to anyone who has shipped a production app. They just aren’t written anywhere the AI tool reads.

What I had to learn

  • How each tool takes instructions: CLAUDE.md and skills for Claude Code, .mdc rules that load automatically in Cursor, project-knowledge files and step-by-step prompts for Lovable and Bolt.
  • How to write a rule a model follows rather than acknowledges: specific, testable, with the check that proves it was done.
  • Selling and delivering digital files: Stripe Checkout, a webhook, signed download links and release versioning.

What I built

Project rules for Claude Code, Cursor, Lovable and Bolt covering security, Supabase RLS, auth, environment variables, deployment, database changes, errors, performance, SEO and UI quality.

Seven Claude Code skills: RLS audit, pre-deploy check, auth flow fix, AI visibility, safe change, plan feature and slop check. Drop-in templates for Vite + React and Next.js, plus checklists and SQL.

  1. 01

    Every rule ships with its check

    The RLS audit skill does not stop at writing policies. It tests as a logged-out visitor and as a second user, because a policy that looks right and leaks is the common case.

  2. 02

    The same rules in four formats

    One set of rules, adapted to how each tool loads instructions. Someone who switches from Lovable to Cursor keeps the same guardrails.

  3. 03

    Free, and no email

    It was sold as five packs, then made a free download with no sign-up. The people most likely to use it are founders building with AI tools, the same people who might need a rescue later; a paywall kept them out.

TESTBEFOREAFTER
Logged-out visitor reads tasks3 rows0 rows
Logged-out visitor deletes Ben’s projectdeletedpermission denied
Ben makes himself adminadminpermission denied
Ben uploads into Asha’s folderallowedblocked by row-level security
Asha renames her own project1 row changed1 row changed
FROM THE SAMPLE RLS AUDIT IN THE KIT: A HOLE CLOSING, AND ONE NORMAL ACTION STILL WORKING.

Where it stands

A free download at anadithakur.in/products/production-kit, versioned, with no account.

What it taught me

Writing rules for a model is writing for a reader who does exactly what the words say, so every rule ends in a check that shows whether it was followed.

Paid packs and checkout were built before anyone had asked to pay. In September 2026 the kit went free.

One download, no sign-up.

Get the Production Kit →