Reminds me of a NASA failure report where they determined the reason the satellite failed immediately after launch was because they built their own circuit-test device to match their assumptions rather than reality. But it passed their test. Now it is spinning uncontrollably above us.

Developers also risk the "I thought of that already so I don't need to test it thoroughly" pitfall, eventually leading to the usual "we didn't think it was possible fail like that"