A final approval signs one manifest while the deploy job renders a different object set during a failover rehearsal

Review and execution diverge because mutation still happens after signoff. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.