High-risk boundaries include source/ID mapping, width and burst conversion, address/attribute transformation, buffering and response reconstruction. Narrowing an ID field is legal only with sufficient mapping, throttling and ordering state; miscounting accepted beats can prevent completion. Compare both interfaces and the bridge's mapping table for the same transaction.
Common trap: Blaming the endpoint master only.