Regressions, explained for founders
Last updated: July 26, 2026
A regression is when something that used to work stops working again, usually as a side effect of a later change. In AI-built apps, it often happens when a new prompt quietly overwrites an earlier fix, so a security hole or bug you already closed silently reopens.
What is a regression?
A regression is when a change makes something that previously worked stop working. The word means "going backwards": a feature, a fix, or a safeguard that was fine yesterday is broken today, not because you touched it directly, but because a different change had a side effect.
Regressions are especially common in AI-built apps because of how they are built: you prompt, the AI rewrites part of the code, you prompt again, it rewrites more. Each re-prompt can undo an earlier change without telling you, since the AI is focused on the new request, not on preserving what you fixed last week.
Why do AI-built apps regress so easily?
AI-built apps regress easily because a re-prompt can overwrite an earlier fix, and nothing warns you. Picture a common sequence:
- You discover a table is missing row-level security and get it added. Data is now protected.
- Weeks later you ask the AI to "add a comments feature" and it regenerates that part of the schema.
- The new version quietly ships without the RLS policy. Your data is exposed again, and the app still looks like it works.
Nothing on screen changed, so you have no reason to suspect anything. The safeguard you paid attention to once is silently gone. That is a security regression, and it is one of the most dangerous kinds because it is invisible from the front end.
How Explain My Build catches regressions
Explain My Build catches regressions by re-reading your code on a schedule and comparing each scan to the last, then telling you plainly "what got worse since last scan." Because it grades the build every time, a fix that gets overwritten shows up as a flagged regression instead of a silent surprise.
This is the point of the continuous documentation audit: it runs in your own CI, so your code never leaves your infrastructure, and it watches for backsliding across security, structure, and your dependency inventory. When an earlier fix-list item reopens, you hear about it.
Honest limitation
Regression detection compares what the code says now to what it said before. It catches issues visible in the code, like a dropped RLS policy or a newly exposed key. It is not a live penetration test and cannot detect a problem that leaves no trace in the source.
Frequently asked questions
What causes a regression in an AI-built app?
Usually a later prompt. When you ask the AI to change or add something, it may regenerate code that included an earlier fix, and drop that fix as a side effect. The app keeps working on screen, so the regression, such as a removed RLS policy, goes unnoticed until something catches it.
How do I know if a fix I made was undone later?
You need something that re-checks your code over time and compares it to before, because a reopened issue is invisible in the running app. Explain My Build's continuous audit re-reads your code each scan and flags "what got worse since last scan," so overwritten fixes surface.
Is a regression the same as a bug?
A regression is a specific kind of bug: one where something that used to work is now broken. Not all bugs are regressions (a brand-new feature can have a fresh bug), but every regression is a step backwards from a state that was previously fine.
Turn your app into a guide your users can follow.
Paste a public GitHub link and get your founder runbook + fix-list free in about a minute — no sign-up. Private code runs entirely in your browser.