I've just been caught out by the fact that api-tools defines an orphan instance Arbitrary UTCTime with a limited range of values. We should either not use an orphan at all, use quickcheck-instances rather than defining it ourselves, or increase the range of values generated.