When the model works in your tests but breaks in production

Wiring the model into the app is the easy part now; I can do that in an afternoon. But once real users hit it, things break in ways I never saw coming, weird answers, random failures, stuff I can't reproduce. Getting it to just work, reliably, day after day, still beats me every time.