I stopped paying for Calendly and had an AI agent build me a self-hosted replacement. calit is real: Java, Quarkus, Postgres, GraalVM native, Google Calendar sync. AI runs, and I then read what it wrote.

This is the autopsy: ten real bugs my AI pair shipped with confidence. A regex that hands attackers a denial of service. A security provider racing itself and rejecting valid logins. Background jobs firing twice on the second replica. A transaction held open across a network call until the connection pool starves. OAuth tokens in plaintext. Sessions that outlive deleted users. A native image that breaks in five ways no laptop test reproduces.

Symptom, root cause, and fix for each, with the real Quarkus, GraalVM, and distributed-systems detail underneath. The lesson: AI is a fast junior that doesn't know what it doesn't know. It nails the happy path and misses the failures that need system-level judgment. That's why I don't think AI is replacing developers: it replaces typing, not judgment.