NS_PARENT_CHILD_MISMATCH

warning

The nameservers this domain is delegated to are not the same set the zone itself publishes.

Working today, and one change away from not working.

How we know

mismatch.test
Delegated to ns1 alone while the zone itself claims ns1 and ns-decoy. Resolvers follow the parent, so the operator believes they have two nameservers and has one.