# How a PatchAndShip job works

Last updated: 2026-10-14

A PatchAndShip job has four steps. Intake: pay for a plan and fill in the intake form. Access: give least-privilege access; the 48-hour clock starts when access is confirmed. Check and fix: AI agents draft the fixes and a human engineer approves every change. Deploy and report: you get a short report of what was found and fixed.

## The four steps

1. **Intake.** Pay for a plan with Stripe. We email you the intake form.
2. **Access.** Least-privilege access only: collaborator access on your GitHub repo, a Supabase org invite with the lowest role your plan allows, and for Vercel a guided handoff or a scoped, expiring token. We never ask for passwords, tokens are shared only via a one-time link, and at handoff you revoke our access (we send a checklist). The clock starts when access is confirmed.
3. **Check and fix.** AI agents run the checks and draft the fixes as code changes and SQL migrations. A human engineer reviews and approves every change before anything reaches production.
4. **Deploy and report.** With Fix & Deploy we also get the app live on your host with your domain and SSL. After the fixes, we re-run our checks against your live app signed out, using only the public key, the same way a stranger would, and show the before and after in your report. On Lovable Cloud, if the public key isn't visible in your built app, we check the policies directly instead. You get a short report of what was found and fixed.

Access details for each platform: [Security and access policy](https://patchandship.com/docs/security-and-access).

## Safety steps

Nothing touches production until a human engineer approves it. We take a backup before migrations when your plan supports it. On Supabase Free we give you a one-command dump to run, or skip schema changes until you upgrade.

Where your setup supports it, we apply changes to a staging branch or preview deploy first. Before anything reaches production we write down a rollback plan: how to revert the code change and reverse each migration. Anything involving real user data or payments is handled by a human engineer, not an AI agent. A human also approves every schema migration and production deploy.

## What pauses the clock

The 48 hours count from when we receive working access to your app. The clock pauses while we are waiting on you. Steps only you can take, such as rotating or revoking keys, changing DNS records and changing settings that need your Owner or Admin role, are not part of the 48 hours. We give you exact instructions for each one. If you use a custom domain, its DNS settings are your responsibility, and time spent waiting on DNS doesn't count toward the 48 hours.

## After handoff: revoke our access

You revoke our access at handoff, and we keep no copies of secrets. We send you a checklist for that.

## About PatchAndShip

PatchAndShip fixes security gaps in Lovable, Bolt, Replit and Cursor apps on Supabase, and with Fix & Deploy gets them live. From $149. Within 48 hours of working access or a full refund. Contact: patchandship@gmail.com · https://patchandship.com/ · Not affiliated with Lovable, Bolt, Replit, Cursor or Supabase.