Why your AI safety certificates are worthless at runtime