Skip to content

Lesson 3.7 · 3:43

Done means someone else can use it

Goal: Have a friend use your app on their own phone, and learn the one rule that keeps it safe: no secrets in your files.

Try it

  1. Ask OpenCode: "Check every file in the site folder. Is there any password, key or personal information in them? List anything you find. Don't change anything." Read its answer.
  2. Send your URL to a friend. They use mobile data, open it, and do the one action without help.
  3. Write down one thing that confused them.

You're done when someone else, on their own phone, on mobile data, did the one action on your public URL, and you have one written note of what confused them.

Recap

  • Done = someone else, on their own device and network, can use it without help.
  • A secret (password, API key) never goes in app files. Uploaded files are public.
  • What confused your friend becomes your next small change.

Next lesson (4.1): directing the agent clearly. Why giving it the right context beats clever wording.