A Gatekeeper policy looks unchanged and one namespace starts failing admission

The policy object is present, yet one control-plane path evaluates an earlier schema version and rejects resources the new template should allow.