Every bug written so you can fix it, not re-find it
One ticket per defect: ID, severity, exact environment (device, OS, browser build), numbered repro steps, and a screenshot or screen recording of the failure happening.
A handful of people poking at the happy path will never find the broken session, the permission hole, or the flow that dies on mobile Safari. Dokime runs a structured QA pass built specifically for apps made with Lovable and other no-code and AI builders and hands you the bugs before your first real users do.
Submitting the payment form without a coupon returns a 400 and no error is surfaced to the user. Reproduced 5/5 on iOS Safari 17.
Example report shown for illustration — not a real client submission.
Documented, ranked, reproducible findings.
One ticket per defect: ID, severity, exact environment (device, OS, browser build), numbered repro steps, and a screenshot or screen recording of the failure happening.
How many Critical / High / Medium / Low findings, which flows we tested, which we couldn't reach, and what percentage of your app was actually covered. No hand-waving about “we tested it”.
Not “add server-side validation”. Which Lovable prompt to run, which RLS policy is missing, which Bubble workflow condition is inverted — guidance that matches how you'd actually change the app.
We re-run the affected cases and mark each ticket verified or reopened, so “fixed” means a second pair of eyes confirmed it — not that the error stopped showing on your machine.
When you ship in a weekend, there's no code review, no staging, no one else who knows how the app fits together. The failures aren't random — they cluster around what happens when a generator rewrites something it didn't fully understand. We test for those first, then everything else.
You asked the AI to change the login page. It rewrote the session handling too. Now a refresh logs users out, or a signed-out visitor can load a page they shouldn't.
Row-level policies get generated optimistically. Either every user can read every row, or your own dashboard returns an empty list and you assume it's a UI bug.
A field gets renamed, a step gets removed, and something three screens away still points at the old shape. It only fails on the one path you never re-tested.
Six questions about auth, roles, data and integrations. It takes two minutes and tells you what your app actually needs.
A single-purpose app or a tight MVP: one or two core flows, one account type, no payments.
Multiple user roles, real auth, a database with permissions, maybe Stripe. Most Lovable apps land here.
Integrations, background jobs, webhooks, multi-tenant data, or anything where a bug costs money directly.
They don't file tickets. They hit the broken signup, close the tab, and never come back. Find it first.