The symptoms we usually find
Security and compliance review is where it dies
The prototype was never built with access control, logging or data handling in mind, so it cannot pass review without a rebuild.
No owner after go-live
Nobody is accountable for monitoring, incidents or changes, so IT refuses to accept it into the estate.
Integration was faked in the demo
Copy-paste and manual steps hid the hard part. Real system connections, error handling and exceptions were never built.
