Five days of BCG coverage collapse into three recurring failures: disclosure lag, trust-pipeline compromise, and AI agents as confused deputies. Historical parallels — MOVEit, xz-utils, event-stream, Norm Hardy's 1988 paper — show none of this is new, just faster and more agentic.