Good questions, and the right ones to be asking before you submit rather than after. 📌 ONE STRUCTURAL THING THAT CHANGES EVERYTHING ELSE Since your shell loads live from server.url, your fixes do not go through App Store review. You fix the web app, hit Publish in Base44, and every user has the fix on their next launch. That is a big advantage over a normal native app, where a hotfix is a review gamble. the flip side is that a bad publish also hits everyone at once, instantly. So your discipline moves from "test before you submit" to "test before you publish." Your editor version and your published version are separate in Base44, which is your safety net. Use it. One warning on live loading. Pushing web updates into a wrapper is fine with both stores, but do not use it to change what the app fundamentally does after review, and do not quietly introduce an external payment path on iOS. That is the thing that gets wrapper apps pulled. 📌 ALERTING, SO YOU ACTUALLY FIND OUT Sentry does not meaningfully notify anyone by default. Set this up now, not after your first outage. - Set the environment value in Sentry.init so production events are separate from anything you trigger in the editor. Every alert rule then filters on production only. - Tier 1: a new issue type appears in production, send to email plus Slack immediately. At launch volume this is fine, you will not drown. - Tier 2: error rate spike, something like 10x baseline inside 5 minutes. Do not invent a threshold before you have a baseline. Launch, watch for two weeks, then set the number form real traffic. - Tier 3: a weekly 15 minute review of your top 10 issues sorted by affected USERS, not by event count. One error hitting 400 people matters more than 4,000 events from one stuck bot - Turn on Spike Protection in your org settings. The free tier is 5,000 errors per month and one runaway loop eats that in an afternoon. - Add your production domain to Allowed Domains in the Sentry project settings. Small note on your setup. A Sentry DSN is public by design, it is meant to sit in client code. Routing it through a backend function is not wrong, it just is not buying you security. Allowed Domains plus rate limiting is what actually protects the project.