I hardened my pipeline against AI hallucinations. Then a CLI hallucinated.
The week I added an LLM safety gate to a file pipeline, the only data loss came from deterministic code: a CLI that silently refused an operation, a fallback that guessed an identity, and a verifier that faithfully verified the wrong object. A short postmortem, and the argument for auditing your boring layers.