Query built by string concatenation of request input

Orders API — order lookup by customer + status filtertarget < 1:30

Catch the bug — name the defect out loud, fast

This is plausible-looking AI output. The naive tests pass. What's wrong, and what's the one-line fix?

0:00