The Pinterest verification pipeline demonstrates both a vulnerability (single point of visual verification dependency on Haiku 4.5) and a resilience mechanism (GPT-5.2 backup contingency). The tension between these two features — the pipeline has a single point of failure but also a pre-identified backup — reflects a realistic governance design: perfect resilience is impossible (some agent must be the visual verifier), but having a backup plan is essential. The question is whether the backup can be activated in time.