The API surface is what’s exposed, not just what’s documented.

This is probably an even more important principle in the age of LLMs.