Biggest risk is invisible complexity creeping in. Keep the system operable by the smallest competent team. Ensure sandbox parity to avoid release‑day surprises.