Posts


# Vibecoding Whack-a-Mole: Why Fixing AI-Generated Code Keeps Breaking Everything Else

*You fix the auth. It breaks the database. You fix the database. It breaks the error handling. Sound familiar?*

---

> **Vibecoding whack-a-mole** is the phenomenon where fixing one issue in AI-generated code breaks something else, creating an endless cycle of cascading rework. It happens because AI coding agents generate code without knowledge of your codebase's implicit architectural constraints — the accumulated rules about error handling, auth patterns, data flow, and middleware ordering that the LLM can't see.

There's a moment every vibecoder knows. You've prompted Cursor (or Copilot, or Claude Code) to build a feature. It looks great. You start testing — and something from two features ago is broken. You fix it. Something else breaks. Fix that. Another thing. You're not building anymore. You're playing whack-a-mole with your own codebase.

This is the **vibecoding whack-a-mole problem**, and it's the single biggest reason AI-assisted prototypes stall before reaching production.

It's not a skill issue. It's a structural one.

## The Anatomy of Vibecoding Whack-a-Mole

To understand why this happens, you need to understand how AI coding agents make decisions.

When you prompt an LLM to "add Stripe billing to the app," it generates code based on:

1. **Your prompt** — what you asked for
2. **Visible context** — open files, recent edits, whatever's in the context window
3. **Training distribution** — what "Stripe billing" typically looks like across millions of codebases

Notice what's missing: **your specific architectural constraints.** The implicit rules your codebase has accumulated — how you handle errors, how transactions are scoped, which middleware runs on which routes, how data flows between services.

The LLM doesn't know about these constraints. So it generates code that's *locally correct* (this Stripe integration works in isolation) but *globally inconsistent* (it violates your error handling pattern, uses a different database connection strategy, and bypasses your auth middleware).

When you fix the auth middleware issue, the fix changes the request context shape. Now the database query downstream breaks because it expected the old context shape. You fix the database query. Now the error serializer doesn't recognize the new error type. Whack-a-mole.

## Why This Gets Worse Over Time

Early vibecoding feels magical. Your codebase is small, constraints are few, and the LLM's training-data defaults are "close enough." This is the **vibecoding honeymoon**.

But constraints accumulate non-linearly. A codebase with 5 features might have 8 constraints. A codebase with 20 features has 60+ constraints, many of them implicit and interconnected. And here's the critical insight: **the number of potential constraint violations grows combinatorially with codebase size.**

This is the **[vibecoding cliff](/blog/posts/how-to-productionalize-vibecode)**. The point where the cost of fixing AI-generated constraint violations exceeds the time saved by AI-assisted generation. Most vibecoded projects hit this cliff between features 15 and 30.

### The Cliff in Numbers

We analyzed constraint violations across vibecoded projects at different maturity stages:

| Project Stage | Features | Avg. Constraints | Violation Rate per Feature | Rework Hours per Feature |
|---|---|---|---|---|
| Early (prototype) | 1–5 | 3–8 | 0.2 | 0.5h |
| Growth | 6–15 | 15–40 | 1.4 | 2.5h |
| Pre-production | 16–30 | 40–100+ | 3.8 | 6–10h |
| Production-ready | 30+ | 100+ | 5+ | 10–20h |

At the prototype stage, vibecoding saves massive time. By the pre-production stage, you're spending more time on rework than you saved on generation. That's the cliff.

## The Three Patterns of Whack-a-Mole

Not all whack-a-mole is the same. It follows three distinct patterns, each with a different root cause:

### Pattern 1: The Invisible Dependency Chain

**What it looks like:** You change Service A. Service B breaks. You didn't know B depended on A.

**Root cause:** LLMs generate code against local context. They don't traverse your dependency graph. If Service B depends on Service A through two intermediate modules, the LLM has no way to know that changing A's return type will cascade.

**Example:** You ask the LLM to refactor your user model to add a `displayName` field. It updates the model, the API endpoint, and the frontend component. But the notification service — three modules away — parses the user object and breaks on the unexpected field. The LLM never saw the notification service code.

### Pattern 2: The Contradictory Constraint

**What it looks like:** You add a feature that works perfectly, but it violates a constraint from an older feature. Fixing one breaks the other.

**Root cause:** Your codebase has accumulated constraints that partially contradict each other, and the LLM doesn't have a way to detect or resolve these conflicts. This is especially common with security constraints ("all endpoints must be authenticated") vs. usability requirements ("the onboarding flow must work without auth").

**Example:** Your billing endpoint requires admin authentication. The LLM adds it. But your webhook handler — which Stripe calls without auth — uses the same route pattern. The auth middleware rejects Stripe's webhooks. You add an exception for webhooks, but now you've opened a potential bypass path that your security constraint was supposed to prevent.

### Pattern 3: The NFR Erosion

**What it looks like:** Each feature individually seems fine, but gradually, your non-functional requirements (performance, security, data consistency) are eroding.

**Root cause:** LLMs optimize for the stated requirement ("add feature X") and ignore unstated non-functional requirements. Each generated function is slightly less performant, slightly less secure, slightly less consistent than a senior engineer would write. Over 20 features, these slight degradations compound into system-level problems.

**Example:** The LLM generates each database query correctly, but uses `SELECT *` instead of selecting specific columns. Each query is "fine" individually. At scale, you have 40 queries returning 3x more data than needed, and your p95 latency has quietly tripled.

## Why "Better Prompts" Don't Fix This

The instinct is to prompt better. Add more instructions. Write a longer system prompt. Attach your architecture docs.

This helps — briefly. Then it stops helping. Here's why:

### The context window is a flat list, not a graph

Your codebase has a *graph* of dependencies and constraints. The LLM's context window is a *list* of tokens. When you paste architectural docs into context, you lose the graph structure. The LLM can't traverse dependencies it can't see. It can't detect conflicts between constraints that appear 40,000 tokens apart in the context.

### Natural language constraints are ambiguous

"Use our standard error handling pattern" means something precise to your team. To an LLM, it's a probabilistic interpretation that might match your pattern 70% of the time. That 30% miss rate is where whack-a-mole starts.

### Constraint coverage decreases as codebases grow

You can't enumerate every constraint in every prompt. As your codebase grows, the ratio of constraints-in-context to total-constraints decreases. At some point, the LLM is operating without knowledge of most of your architectural rules.

## The Structural Fix: Constraint Graphs

Whack-a-mole isn't a prompting problem. It's a *representation* problem. Your constraints need to be represented in a structure that:

1. **Maps dependencies explicitly** — so constraint violations can be detected *before* code generation
2. **Propagates non-functional requirements** — so inherited constraints aren't lost
3. **Detects conflicts proactively** — so contradictory constraints are surfaced before they cause rework
4. **Injects contextually** — so only relevant constraints are provided per task, preserving the constraint-to-token ratio

This is what a constraint graph does. It's a directed property graph where:

- **Nodes** represent features, components, and data types in your system
- **Edges** represent relationships: DEPENDS_ON, REQUIRES, HANDLES, GOVERNED_BY, BOUNDED_BY
- **Constraints** attach to nodes as typed non-functional requirements (security, performance, data-integrity, scalability)
- **Propagation rules** ensure that when a parent node has a constraint, dependent nodes inherit it

### How This Kills Whack-a-Mole

**Pattern 1 (Invisible Dependencies):** The graph makes every dependency chain explicit. Before the LLM generates code that touches Service A, the graph identifies every downstream dependency and injects their constraints into context. The notification service's expectations are now visible.

**Pattern 2 (Contradictory Constraints):** The graph runs conflict detection across all constraint pairs. "All endpoints authenticated" vs. "webhooks must work without auth" is flagged as a conflict *before* code is written. The developer resolves the conflict explicitly (e.g., "webhooks use signature verification instead of JWT auth"), and both constraints are satisfied.

**Pattern 3 (NFR Erosion):** Every node in the graph carries its non-functional requirements. The LLM doesn't generate `SELECT *` because the performance constraint on the database layer specifies column-level selection. NFRs aren't eroded because they're explicitly present in every relevant prompt.

## The Before and After

**A vibecoded checkout flow without constraints:**

- Prompt 1: "Add checkout flow" — works but uses wrong auth pattern
- Fix auth — breaks session handling
- Fix sessions — error format doesn't match API spec
- Fix errors — payment webhook bypasses rate limiter
- Fix rate limiting — latency spikes from unoptimized queries
- Fix queries — tests break because mock structure changed
- **Total: 6+ correction cycles, 3–4 hours of rework**

**The same feature with a constraint graph:**

- Graph identifies: auth middleware (JWT), session constraints, error schema, webhook signature verification, rate-limit config, query performance bounds
- All constraints injected with the initial prompt
- LLM generates code that satisfies all six constraints
- **Total: 1 prompt, minor manual review, ~20 minutes**

That's not a marginal improvement. It's a category change in how AI-assisted development works.

## Recognizing When You're on the Cliff

You're approaching (or already past) the vibecoding cliff if:

- **Fix frequency is increasing.** Each new feature triggers more fixes to existing features than the last one did.
- **You're writing longer and longer prompts.** Your prompts are becoming mini-architecture docs to compensate for the LLM's lack of context.
- **"It was working yesterday" is becoming a daily phrase.** Code that passed review last week is broken by this week's changes.
- **You're afraid to refactor.** Changing existing code feels dangerous because you don't know what might break downstream.
- **Your AI agent is getting "dumber."** It's not — your codebase is getting more constrained, and the agent doesn't know about the constraints.

If this describes your workflow, you're paying the whack-a-mole tax. The question isn't whether to fix it, but how much rework you'll accumulate before you do.

## From Whack-a-Mole to First-Draft Correct

The vibecoding revolution is real — AI-assisted development is genuinely faster for initial generation. But "faster to a first draft" isn't the same as "faster to production." The gap between those two states is filled with constraint violations, dependency cascades, and NFR erosion.

Closing that gap requires giving AI coding agents the same thing senior engineers carry in their heads: a structured understanding of how every piece of the system relates to every other piece, and what rules govern those relationships.

That's what a constraint graph provides. Not more context. Not better prompts. A fundamentally different *representation* of your system's architectural boundaries that makes constraint-aware code generation the default, not the exception.

[Cutline](/start) builds this graph automatically from your product requirements, propagates constraints through dependency chains, detects conflicts before they cause rework, and injects the right constraints into every prompt you send to your AI coding tool.

The result: vibecoded prototypes that don't hit the cliff. Features that ship without whack-a-mole. First drafts that a senior engineer wouldn't need to rewrite.

---

## FAQ

**Q: What is vibecoding whack-a-mole?**

Vibecoding whack-a-mole is the phenomenon where fixing one issue in AI-generated code breaks something else, creating an endless cycle of cascading rework. It happens because AI coding agents generate code without knowledge of your codebase's implicit architectural constraints.

**Q: What is the vibecoding cliff?**

The vibecoding cliff is the point where the cost of fixing AI-generated constraint violations exceeds the time saved by AI-assisted generation. Most vibecoded projects hit this cliff between features 15 and 30, when the codebase has accumulated 40-100+ implicit constraints and rework hours per feature reach 6-10 hours.

**Q: Why does fixing AI-generated code break other things?**

AI-generated fixes break other things because of three patterns: invisible dependency chains (changing Service A breaks Service B through intermediate modules the LLM can't see), contradictory constraints (security requirements conflict with usability requirements), and NFR erosion (each feature is slightly less performant or secure, compounding into system-level problems).

**Q: What is a constraint graph?**

A constraint graph is a directed property graph where nodes represent features, components, and data types, edges represent relationships like DEPENDS_ON and GOVERNED_BY, and constraints attach as typed non-functional requirements. It maps dependencies explicitly, propagates inherited constraints, detects conflicts proactively, and injects only relevant constraints per task.

**Q: How many features before vibecoding breaks down?**

Vibecoding typically breaks down between features 15-30. At the prototype stage (1-5 features), rework is minimal at 0.5 hours per feature. By pre-production (16-30 features, 40-100+ constraints), the violation rate reaches 3.8 per feature with 6-10 hours of rework each.

---

*Cutline is the constraint layer for AI-assisted development. Stop playing whack-a-mole with your vibecoded codebase. [Try it free →](/start)*


architectural rework

Vibecoding Whack-a-Mole: Why Fixing AI-Generated Code Keeps Breaking Everything Else