WAF rollback looks complete but one hostname still enforces the old rule

A temporary block is reverted and most traffic returns to normal, but one API hostname still rejects the old pattern.