The breach came without warning. An engineer merged code, the build passed, and access spread deeper than anyone expected. One missed control, one unchecked role, and the blast radius expanded. This is why fine-grained access control and separation of duties are not optional—they are core to secure, resilient systems.