JSDoc says `
@returns {Promise<User|null>}` when the function actually throws on a missing user.
The agent wrote the comment to match what it thought the code did. The next reader trusts the doc and doesn't handle the throw.
Where do you catch doc drift before it becomes a bug?