No credential stolen, no server compromised, no employee deceived. The contract executed exactly as published — the specification and the intent diverged.