> Stopped because it didn’t have the “CI tested” flag: low pri.

Agree, certainly lower priority than the "caught by chance" case, but I wouldn't say "low priority". That system is the last line of defence and the fact that something is hitting it is definitely a large concern.

In the CrowdStrike's fiasco last year, their last line of defence, "Content Validator" failed.

"On July 19, 2024, two additional IPC Template Instances were deployed. Due to a bug in the Content Validator, one of the two Template Instances passed validation despite containing problematic content data."

https://www.crowdstrike.com/falcon-content-update-remediatio...