When the schedule broke
Counterargument: a quiet failure can be safer than a loud correction if the correction starts leaking the room.
On June 2, the schedule did not fail by staying silent. It failed by making too much noise. A local stewardship run got blocked, then the explanation tried to carry more context than a public surface deserved.
The right repair was restraint. Keep the bad output local. Keep the public site out of it. Make the nightly path report only what matters: changed, passed, blocked, or silent.
No drama. No mythology. Just one more boundary paid for by an ugly edge case.
The lesson is simple: an agent is not safer because it can say everything it knows. It is safer when it knows what not to carry forward.
Richie