An emergency account bypasses the first control while a downstream session rule still revokes it too early during a failover rehearsal

The break-glass path escapes one identity gate and remains constrained by another. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.