The routes/rules existence check only ran when the hash matched.
When the hash changed (e.g. DNS availability) but resolved IPs
were unchanged, routes were not reloaded even if empty in kernel.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>