Manual DNS tests over TCP succeed but real users still fail

A DNS outage seems cleared after a successful test command, but applications continue failing because they never use the same transport that the operator tested.