A NetworkPolicy permits the application path

App traffic is allowed, yet name resolution fails because the helper path no longer matches policy assumptions. The functional path still exists, but one hidden dependency still assumes the old boundary between shared and isolated resources. A hidden dependency still assumes the old shared-service boundary even though the visible workflow stayed intact. The visible workflow still functions, but one dependency continues to assume the previous shared ownership contract.