A single AI agent conversation can look perfect and still be broken