The agent fetched the access token once at boot and cached it forever, so rotation broke the app hours later

We asked the agent to wire an outbound call to a third-party billing API. It read the auth guide, obtained a client-credentials token, and added a module-level constant: fetch the token once at startu