A jailed shell on a shared host silently bind-mounted a Docker container's overlay filesystem into its own view. Three straight docker rm -f runs still found the mount busy, because the thing holding it open was never the container the deploy script could see.
A weekly audit ledger sealed each finding into a SHA-256 hash chain, but the hash and the database row each read the clock independently — so every untampered entry would have verified as tampered. The fix was one field, passed explicitly instead of left to a schema default.
A refactor made a branch entity canonical across tenant workspaces so it could belong to several at once — but the balance queries that filtered on its id kept summing every workspace's top-ups and usage together, so a workspace with no billing connection configured still saw another tenant's budget on its dashboard.
SentraOps ships stock between warehouses through one shared virtual TRANSIT buffer, and a plan-checker caught the flaw before a line of code existed: freezing the unit cost at ship time breaks the moment two transfers of the same item at different costs land in that buffer and get received out of order.
A goods-receipt line's unitCost field meant two different things at once — the vendor's price, and that price plus the freight allocated onto it. The moment the second meaning won, the AP invoice's GR/IR clearing math invented a purchase-price variance that was never real.