An SELinux boolean is enabled while a later package update reloads a policy module that still denies the exact type transition the app needs during a failover rehearsal

The expected switch is on, yet the effective policy path still blocks the workflow. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.