WAF rule rollback looks complete but one API hostname still enforces the old behavior

A temporary block is reverted and most traffic returns to normal, but one API hostname still rejects the old pattern.