A staged rollback restores old manifests while the backing secret reference already rotated to a new key family during a failover rehearsal

The old release comes back up, but its runtime secret contract no longer exists in the same form. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.