A NetworkPolicy permits the application path

App traffic is allowed, yet name resolution fails because the helper path no longer matches policy assumptions. The service still works through the primary path, but one dependency only fails when the old component is finally drained away. The primary component still serves traffic, yet the retirement exercise exposes a latent dependency on what is being removed. The main path still works until the exercise finally removes the legacy dependency it had quietly relied on.