Do not close open connections blindly on policy update: assess whethe…

crates/openshell-supervisor-middleware/src/lib.rs

@@ -364,7 +364,7 @@ impl OnError {
     }
 }
 
-#[derive(Debug, Clone)]
+#[derive(Debug, Clone, PartialEq)]
 pub struct ChainEntry {
     pub name: String,
     pub implementation: String,

crates/openshell-supervisor-network/src/l7/relay.rs

@@ -3629,6 +3629,11 @@ where
         let mut response_selection = None;
         let req = if let Some(engine) = middleware_engine {
             let input = middleware_network_input(ctx);
+            // Give a revalidating guard the chance to re-pin through an
+            // unrelated reload before comparing raw generation numbers.
+            if generation_guard.is_stale() {
+                return Ok(());
+            }
             let (chain, generation) = engine.query_middleware_chain_with_generation(&input)?;
             if generation != generation_guard.captured_generation() {
                 return Ok(());