Aha! It turns out, after a bit of failure-mode profiling, that when