What AI hallucination patterns are you hitting?

[vibestackdev]

I built these 22 rules after documenting every recurring mistake Cursor Agent makes with Next.js 15 + Supabase. The getSession() vs getUser() security flaw alone cost me 6 hours of debugging on a production app.

What patterns are you seeing that I should add rules for? Some areas I want to expand:

• Drizzle ORM patterns
• • Prisma edge runtime issues
• • Next.js middleware auth patterns
• • tRPC integration rules
    Drop your worst AI-generated bugs and I will turn them into constraints.