A model can look safe in a lab and still behave unexpectedly in public. The real work starts after launch, when people use a system in ways its creators did not predict.