Notes from a 2 AM On-Call: When APISIX's Upstream Health Check Lied to Us

A postmortem of silent upstream failures in APISIX that evaded active health checks, causing cascading 502s under concurrent load.