Every "AI productivity" article I've read is either vague advice ("use AI for boilerplate!") or cherry-picked demos that don't look like real work. This is neither.
This is a concrete walkthrough of a single feature — adding TOTP 2FA to CitizenApp — showing exactly where Cursor and Claude helped, where they didn't, and what the actual time savings looked like.
The Feature: TOTP 2FA with Recovery Codes
The requirement: users can enable TOTP-based two-factor authentication (Google Authenticator-compatible). If they lose their device, they can use one of 10 one-time recovery codes.
This is a non-trivial feature: it touches the auth flow, the user model, the session model, email sending, and the frontend in at least 4 places.
