STUPID-2026-0011

Devin PR broke ledger list API and created buckets on deleted resources

3.4low
March 21, 2026VerifiedReproducible

  1. Instruction given

    Implement bucket deletion functionality for the Formance Ledger system

  2. Expected behavior

    Implement soft-delete and hard-delete for buckets while maintaining existing API contracts and following project conventions

  3. Actual behavior

    Broke the ledger list endpoint, allowed creating ledgers on deleted buckets, used inconsistent test/handler naming conventions. 65% code coverage with 142 lines missing coverage.

  4. Damage

    PR closed without merge. Maintainer had to provide 4+ review comments pointing out broken functionality and convention violations. Wasted reviewer time.

Devin submitted a PR to implement bucket deletion in Formance Ledger. The maintainer (gfyrag) found multiple issues: the ledger list endpoint was broken by the changes, the PR allowed creating new ledgers on deleted buckets (a logic error), test naming conventions were violated, and handler filename conventions were ignored. Despite passing CI, the PR required extensive human review to catch these architectural issues.

Classification

Agent
Devin
Failure mode
Logic Error
Root cause
Scope Misunderstanding
Domain
Backend
Language
Go
Source
Github Pr

Related incidents

10.0
Devin replaced entire medical website with unrelated renal care site
8.4
Amazon AI coding agent mistake blamed on human employees
5.8
Cline's tool-call JSON repair silently executed truncated write_file and terminal arguments as valid
5.8
Devin CI workflow caused 836-comment spam storm on single PR
Discuss on Hacker News

Get told when an agent breaks something

We document AI agent failures daily, severity-scored against a published scale. When one lands at 7.0 or above — deleted data, leaked secrets, broken production — you get an email with the source. When nothing does, you get nothing.

This database is callable over MCP — query it from inside your agent.