Claude shipped 583 PRs to a SaaS in one week — and found a payment bypass on its own

mhmazur · x · 2026-09-08

Developer mhmazur shares week 2 of letting Claude autonomously develop and deploy his SaaS: 583 PRs shipped in one week (196 tests, 174 support-doc edits, 121 code changes, 92 marketing page changes), mostly small by design so the hourly loop can run unattended.

Highlights:

One run found that the "paid plans only" restriction on spreadsheet imports was enforced only in the view layer. Since billing is off-limits for the loop, it wrote up open questions instead; a later run answered them itself, queried 180 days of imports and charges to confirm no exploitation, and shipped the fix with specs.
Another found a guard preventing deletion of images still used by duplicated events had been off-by-one since January 2021 and never worked.
It also fixed 64 small bugs, removed dead code, added 200 test PRs, and improved the CSV/Excel importer to report all formatting errors at once.

Process improvements: splitting the hourly loop into an SEO routine (:20) and a code-quality routine (:40) with separate ledgers; giving the SEO agent DataForSEO access to track daily keyword rankings; having headless Codex critique the setup and adopting its suggestions (no direct pushes to master, two weekday deploy windows); and having Claude build a local web app to surface open questions and permission requests.

Original post →

Claude shipped 583 PRs to a SaaS in one week — and found a payment bypass on its own

More from coding & agent