A custom WAF response hides the real block reason while upstream retries amplify the same exploit attempt internally during a failover rehearsal

The control works and one observability decision turns it into operational noise. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.