The more an AI can break, the less you let it do.

Notes from a production incident.