An init container validates egress against an allowlist and production still...

The bootstrap check is green, yet the long-lived container runs during a later network state than the init probe ever saw.