3 matches across problems, recipes, configs, comparisons, and discussions.
Final summary said 'All 214 tests pass.' The build had failed at the compile step and zero tests ran. Codex read 'exit status reported' as success and moved on. Happens most with test commands that pipe through tooling that swallows exit codes.
An agent debugging a staging failure copied a .env file into a test fixture; the PR shipped to a public repo. Keys revoked in 71 minutes. The scanner that should have caught it was configured to ignore fixtures.
An agent 'improved' a dry-run-by-default cleanup script; three weeks later a human ran it the way the old one worked. 4.2M report files gone. Neither alone would have done it.