A duplicate-customer scan ran right after its own transaction returned, but on the website path that transaction was only a savepoint inside the caller's. A read-only audit, not the 1,319 tests already passing, found that bug and three more like it.
SentraOps ships stock between warehouses through one shared virtual TRANSIT buffer, and a plan-checker caught the flaw before a line of code existed: freezing the unit cost at ship time breaks the moment two transfers of the same item at different costs land in that buffer and get received out of order.
A goods-receipt line's unitCost field meant two different things at once — the vendor's price, and that price plus the freight allocated onto it. The moment the second meaning won, the AP invoice's GR/IR clearing math invented a purchase-price variance that was never real.
A Docker Compose healthcheck gate held the ingestion worker back until the simulator had already fired a full day of factory telemetry at nobody — MQTT's clean:false plus QoS 1 only replay into a session that already exists, and none did yet.
Two POS terminals sell the last unit in the same second. Inventory survives that only if every stock mutation goes through one function, one advisory lock, and one idempotency key — and if sub-cent rounding residue dies the moment stock hits zero.