The agent wrote a health check that passed while the database was on fire
The agent added /health, CI green, the load balancer happy. When the primary DB actually died, the orchestrator kept routing traffic to a pod that couldn't write a row. The health check was lying, and the agent had written it.