A validating policy allows create requests while an update path generated by a controller now violates a field immutability assumption during a failover rehearsal

The original manifest shape is valid, but the controller's own later mutation path is not. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.