A coding agent that leaked secrets from repository instructions; a managed runtime that hid injected logic from customer-visible telemetry; a workflow that reported success while one of its tools had already failed. Across all three, reconstructing what happened was easier than reconstructing why.