Answer
Consider whether a core permission set was modified at some point without going through your normal change process — an unintended modification to a core permission set has been a real, hard-to-spot root cause of recurring update problems, and can take a long time to trace without specifically checking for it.