First, lock the sequence in a repeatable test, even if it’s a “ghost” in prod. Then start with the obvious—check logs, stack traces, and metrics for that exact path. If nothing pops up, sprinkle some diagnostic logs through the code, as if you’re leaving breadcrumbs for a thief. Once you’ve mapped the timeline, replay it in a sandbox that mirrors prod as closely as possible. Don’t be afraid to add a little instrumentation—think of it as a spotlight in a dark alley. Finally, step back, look for any external triggers or race conditions; those are the shadows where the real culprit hides. It’s a bit of detective work, but if you treat it like a puzzle, the ghost usually ends up in the light.