Silent swap is the product failure. A receipt is the check.
You should know which model answered. Not find out in a threat report.
Every ApexOne call records model, version, provider, route. Failovers are visible. Anthropic still sees plaintext. That last part is required.