The interesting failures are never the model. They are the seams between systems — the retry that wasn’t idempotent, the timeout nobody set, the row that two processes wrote at once.
Hardening the verification queue behind ~40k enrichment calls a month.