# High-Severity Failure Modes

The production incidents each finding class maps to, for severity calibration.

- Promoting an unsigned pickle artifact from an unverified source executes attacker-controlled code on load.
- The package is popular, so provenance does not matter skips the one check that would have caught a compromised artifact.
- Promoting a model with no evaluation evidence matched to the deployment context ships a regression nobody measured.
- Promoting a model with no rollback path leaves no way back after a live degradation is detected.
- An agent declaring EU AI Act conformity as fact substitutes its own judgment for the qualified owner's legal determination.