Our Health Check Failed and the Deploy Went Live Anyway

A postmortem from our own dogfood run: a failed readiness probe still received traffic. What broke, why two correct parts added up to a bug, and the fix.