Mistake 8 is the one I run into most, where a single clean run in the test console gets treated as proof. Building eval datasets from the execution logs of earlier runs is what finally helped my own agents, because real requests carry ambiguity I never think to write myself. Of those 100 scenarios, how many of yours end up being multilingual or hostile-text cases?