“A redirect only works if every consumer of the config layer honors it, and the ones that don’t fail silently, because a working connection to the wrong database looks exactly like a working connection. We shipped two consumers that quietly ignored ours.”

— Michel Chatmajian, Abnormal AI · Share one environment, override one service

Quote · builders.abnormal.ai

From “Make Every PR Prove Itself”, found 2026-10-14.

Take

Isolation that leaks fails silently. They added a capture agent that checks the connections each test actually makes against the service’s declared manifest.