Three days ago I filed the most serious issue my project has ever had — against myself.
The tool is safari-mcp, an MCP server that lets an AI agent drive the Safari you're already logged into. That premise is the whole value proposition, and it's also the whole danger: the user is using this browser at the same time as the agent. The single promise the project makes is "the agent never touches a tab it didn't open."
The issue was that the promise had broken. Two of a user's tabs ended up displaying pages the agent had loaded. Nothing was closed — the back-history survived — but scroll position, in-page state, anything unsaved: gone.
I wrote up the incident, traced the root cause, and proposed a fix. Then today I opened the file to actually write that fix.
My root cause was wrong. The fix I proposed had already shipped, three months ago. And the real bug was sitting four lines below it, wearing the word "fix" in its own log message.
