Route leaking between VRFs works in one direction but the return path misses

Forward reachability is proven, yet replies fail because the destination VRF only imports part of the leaked prefix set.