A mutual TLS path validates at the edge while revocation checks or identity forwarding fail later in the request chain during a failover rehearsal

Transport setup succeeds and the secure identity contract breaks farther downstream. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.