{
 "title": "What breaks when AI apps go live",
 "updated": "2026-09-26",
 "source": "https://research.gemmein.com/",
 "license": "Free to cite with a link to research.gemmein.com",
 "sample": {
  "verified_cases_12m": 59,
  "reports_judged": 916,
  "posts_collected": 4469
 },
 "split": {
  "sign-in": 20,
  "payments": 19,
  "data rules": 18,
  "other": 2
 },
 "funnel": {
  "collected": 4469,
  "scored": 994,
  "judged": 916,
  "verified": 208,
  "last_12_months": 59
 },
 "sources": {
  "github": 1257,
  "stackoverflow": 906,
  "hackernews": 892,
  "discord": 468,
  "cursor_forum": 327,
  "github_discussions": 183,
  "devto": 150,
  "reddit": 100,
  "netlify_forum": 63,
  "vercel_forum": 62,
  "bubble_forum": 61
 },
 "history": [
  {
   "day": "2026-09-25",
   "cases": 208,
   "recent": 59,
   "read": 4469
  },
  {
   "day": "2026-09-26",
   "cases": 208,
   "recent": 59,
   "read": 4469
  }
 ],
 "weekly_new_cases_last_12_weeks": [
  0,
  2,
  0,
  2,
  2,
  1,
  0,
  2,
  13,
  2,
  1,
  3
 ],
 "patterns": [
  {
   "title": "Sign-in and sessions that don't hold in production",
   "cases": 15
  },
  {
   "title": "Access rules that let one customer reach another's data",
   "cases": 10
  },
  {
   "title": "Access rules that lock out the rightful user, or that nobody can verify",
   "cases": 9
  },
  {
   "title": "Payment webhooks that never grant access",
   "cases": 9
  },
  {
   "title": "The whole auth and data backend goes down at once",
   "cases": 6
  },
  {
   "title": "File storage behind hand-written policies",
   "cases": 5
  },
  {
   "title": "Subscription and pricing logic rebuilt by hand",
   "cases": 5
  }
 ]
}