A deleted guard was replaced by a cap on the finished value instead of on the input. The cap used the wrong unit and a sibling number still read the raw input, so the safety reserve silently vanished.
Name the replacement when you delete a guard. Else you reinvent it once per round, wrong in a new way each time.
Bound the input, not the output. Capping one result leaves its siblings raw.
Bound the input, not the output. Capping one result leaves its siblings raw.