API server audit logs show the patch but the controller cache never sees it

The update reaches the API, yet the controller behaves as if nothing changed because its watch stream state drifted and the resync never caught up.