eBGP TTL security is configured on one side only after the provider path gains an extra hop, and the session drops permanently

Both peers still have the right neighbors configured, yet the control-plane hardening assumption no longer matches reality.