Five production bugs that passed every API check while the page was broken — including an HTML escape that killed the click handler on a third of the cards.