A preview environment uses feature flags from production defaults and hides one missing secret until the production rollout toggles the path live during a staged decommission

Lower environments looked clean only because the risky path never became active there. The service still works through the primary path, but one dependency only fails when the old component is finally drained away.