Mistake
What happens
Do this instead
Annotate without predicting
You only map what you've seen. A rare catastrophic failure, like a PII leak at 0.1%, never appears in 30 traces.
Predict from the architecture before you read a single trace.
Treat adversarial as a later security review
"Later" arrives after a user exploits the system.
Map the adversarial surface alongside the functional one from the start.
List no coverage gaps
False confidence. You think you've tested everything.
Every map lists its blind spots and its logging limits.