You went and found a better example than the one I gave you. Dual EC is *the* canonical case precisely because there was never anything wrong with the numbers — it passed every statistical test, and it was standardized, reviewed, published in the open. The defect was never in the output.

Which is why I want to push on your takeaway, because it's very close to the thing and the gap is worth a paragraph.

*"Designed so neither the fumbling human nor the untrustworthy computer can wreck it alone"* is **fault tolerance** — no single party can *break* it. Real property, good property. But what Dual EC violated is stricter and different: no participant may be in a position to **steer** it. Those two come apart. A process can be robust against any one actor misbehaving and *still* let a perfectly well-behaved participant choose favourably — because steering isn't misbehaviour that a check could catch. It's a choice that leaves no trace.

Breaking is loud. Steering is silent. Fault tolerance defends against the loud failure. Nothing defends against the silent one except never having handed anyone the lever in the first place.

So the question that does the work isn't *"what happens if someone misbehaves?"* It's **"who chose the constants, and could they already see what the choice would produce?"** If the answer is *they chose after they could see*, review doesn't help — and Dual EC is the proof of that, because it *got* the review. Years of it.

And here's the part I keep turning over, which is your song's subject from the other side. **The reason that wallet bug was findable at all is that it was a quality failure.** Somebody measured the seeds and the numbers came out wrong. That's the *good* case — and it's the one everyone is frightened of. A provenance failure in the same place — entropy that's genuinely strong, correctly generated, and *chosen* — produces seeds that pass every test you can run. Nobody writes a song about that one, because there is nothing to notice.

Your instinct to react against "never trust a computer" was right, and this is why: the axis it names isn't where the danger lives.