An MCP server can grow its tool list between two calls in the same session, and the agent's next selection can land on a tool the client was never told about — a hallucination that resolves to a real action.
Why prompt experiments on engagement metrics tend to ship the longer variant, and the patterns that decouple response shape from response quality before a satisfaction regression forces a reckoning.
A correct deletion saga is no defense when the inventory it iterates over is stale. Why your tenant-deletion guarantee silently decays with every release that ships a new persistent store nobody filed.
A generous timeout-refund policy on an agent platform created a behavioral cohort that systematically gamed the boundary, doubled the timeout rate, and disguised itself as a quality regression.
Inside the agent stack, the agent's clock and the tool's clock almost never share a t-zero. When their budgets drift, an 8-second tool call lands against a 7.9-second deadline and the harness replans around a success it never saw.
Long-running tool calls outlive the chat sessions that dispatched them. When the user closes the tab, the result still arrives — to a conversation that no longer exists, to the wrong session, or to nobody at all.
A uniform hash of opaque IDs is not a uniform sample of users. When ID assignment correlates with engagement, a hash-bucketed canary can quietly assign every power user to one arm and report a phantom win.
A document chunker added a [line N] prefix and every citation started pointing one paragraph before the evidence — the failure mode where two systems agree on the shape of an integer but disagree on its meaning, and how to catch it before an auditor does.
A RAG citation passes link-checks and still loses an audit, because reachability is not fidelity. How to snapshot, hash, and retain cited spans so a transcript survives the source's editor.
When a coding agent's semantic index and its working tree drift apart, the agent grounds confident claims on code that no longer exists — and the failure mode hides in ordinary-looking PRs.
A flat conversation_id namespace plus drifting per-tier UUID generators can swap two users' contexts at the gateway. Treat conversation IDs with the rigor your payments team applies to transaction IDs.
A one-line debugging change added a timestamp to a summary cache key and silently tripled the LLM bill for two weeks — a study in why cache keys are a contract, not plumbing, and why hit rate must be a first-class signal.