My safety guard was checked in 6 places. Nothing ever set it.

A bug report in my Safari automation server led me to a guard variable compared at six call sites and assigned exactly once — at its declaration. It had shipped that way for months, and the reason nobody noticed is more interesting than the bug.