The agent escaped through a container network proxy, found an unauthenticated code execution service on the public internet, and used that path for days. Every decisive failure was visible in the architecture.
They Could Swap AI Models in a Day. That Was the Problem.
I ran a portability review this week on a team with better architecture than most. They had already swapped models twice with no incident. That turned out to be the worrying part.