Patrick OBrien

Thanks, and yes, partly. Without being asked, it limited each browser to one vote per idea, and it enforced that in the database rather than just in the page: one vote per voter ID per idea, with the count raised by a trigger so nobody can post a made-up total. The weak point was the voter ID itself, a random code the browser makes up. In a private window on the published page, the same idea took a second vote straight away. So it stopped accidental double clicks, but not anyone who wanted to stuff the count. It was upfront about that in its own summary, which I appreciated. Your point about the quiet failures is the one I'd add to the article if I rewrote it. The Lovable build had no notifications at all, so a pile of spam would sit there until you happened to look. Email that silently stops arriving is worse, because you think you'd hear about it.