header was missing. Why? We changed an auth library and the new one expected additional header. Why we didn’t know about the new header? Because we didn’t read the docs. Why we weren't able to quickly revert the false release? The release pipeline was failing. Why? Production credentials were not in the environment. Why? We wanted to speed up deployment and disable protection on the master branch. Why? We didn’t have hotfix process. Why we deployed the faulty release? There are no tests covering authentication. Why? It was written at the beginning of the project when we didn’t have time to write tests. Why code coverage tool didn’t catch it now? Because it was misconfigured.