Emergency allowlist fixes the outage but quietly leaves a much broader bypass than intended

A temporary rule restores access, yet it also permits traffic far outside the original blast radius because the exception is too broad.