An SRV cutover looks correct in direct dig and still fails in apps

The SRV record is visible, yet one target remains hidden because the resolver remembers that it used to return NXDOMAIN.