Then I found my checkout could open two charges on a double-click. The Stripe call had no idempotency key. Nobody wrote a bug; the code did exactly what I asked for. I just didn't know to ask for the idempotency key, and neither did the model.
That's the whole thesis. AI coding tools build what you request — the gap is the requirements your kind of app carries that you never think to state. Forespec is 42 of them, and the first real find it ever made was that idempotency key, on my own store.