Run this before every client sees a site: AI review first, then your own checks, then a clean hand-off.
Step 1: AI code review
Codex: type /review. You can review against a base branch (PR style), your uncommitted changes, one commit, or with custom instructions. The review doesn't modify your working tree.
Claude Code: paste this prompt.
Review my changes for bugs before I ship this to a client. Check: forms (validation, what happens on error), mobile layout, broken links, missing alt text, console errors, and anything that leaks keys or personal data. List the issues first, ordered by how bad they are. Don't edit anything yet.
Then fix the issues one at a time, and run the review again until it comes back clean. AI review catches a lot, but not everything. That's why Step 2 exists.
Step 2: check it yourself
Mobile (on a real phone, not just the browser)
- Menu opens and closes; every link works
- No sideways scrolling on any page
- Buttons are easy to tap; text is readable without zooming
Forms and contact
- Submit a real test message and confirm it arrives
- Empty or wrong fields show a clear error
- Phone, email and WhatsApp links open the right app
Content
- No placeholder text ("Lorem ipsum", "Your headline here")
- Business name, address, hours and prices are correct (ask the client to confirm)
- Every image is the client's own or licensed
Speed
- Run Lighthouse in Chrome DevTools; fix the biggest warnings
- Images are compressed and sized for the screen
SEO basics
- Each page has its own title and meta description
- A favicon and a social share image are set
- Google Business Profile links to the site (for local businesses)
Accessibility
- Alt text on images; one H1 per page
- You can reach every button and link with the Tab key
- Text has enough contrast against its background
Safety
- No API keys or passwords in the code or the repo
- HTTPS works; forms are protected from spam
Step 3: hand it to the client
- Send the live link plus a 1-minute screen recording walking through the site
- List what's included and what isn't (e.g. "blog setup is not included")
- Hand over logins, domain and hosting details safely (a password manager share, never in plain chat)
- Explain how they can change text or images, or what you charge for updates
- Ask for a short review you can share (with their permission)
A clean hand-off is what gets you the next gig and the referral.
Checked against the official docs (Nov 2026): Codex CLI docs: /review
Need a website built properly?
We build fast, mobile-first websites for businesses, with this exact AI workflow.
