Show and tell: a 60-check Next.js + Supabase launch checklist

I made a compact pre-launch checklist for solo developers and small teams shipping Next.js + Supabase.

Three examples from the checklist:

• Verify that SUPABASE_SERVICE_ROLE_KEY is used only in server code or route handlers and never reaches the client bundle.
• Enable RLS on every public table, define explicit policies, and test them with a real non-admin user.
• Keep service-role queries server-side and test auth confirmation, reset, protected routes, and session refresh before launch.

The full version is an 8-page PDF with 60 checks across secrets, RLS, auth, performance, metadata, monitoring, backups, domains, environment variables, and production payment-webhook tests.

It is a paid $12 product: https://cengokurtoglu.gumroad.com/l/xjnmxt

This is an educational review aid, not an automated scan, penetration test, compliance review, or guarantee that an app is secure or bug-free. Every example should be adapted and tested in the project's own environment.

I'd value feedback from the Supabase community: which Supabase-specific launch failure should become the next public sample or be added to a future revision?