We had a shared secret scanner. We had a comment saying it covered every path that assembled context and sent it to an external model. Both were true right up until they weren't: one assembly path had quietly grown up without ever inheriting the scanner. Nothing detected the gap, because the claim o...