Tester got blamed
The security team issued a green report stating clearly that functional and performance testing were outside its scope.
Delivery removed the word security from the heading and presented it as independent assurance.
When the service failed under load, testing was asked why it had signed off the release.