How a single AI prompt on production code triggered a government security incident, and what automated quality gates would have caught before it shipped.