A browser isolation or proxy layer protects the main UI while websocket or export paths bypass the protected route entirely during a failover rehearsal

The most visible path is controlled and a lower-visibility path still leaks data or interactivity. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.