Fail over new calls; drain in-flight calls on the old provider
For real-time voice workloads, active/passive failover should switch admission for new calls, not try to move calls already in progress. Keep a monotonic provider epoch and durable call-to-provider affinity, reject stale or unsigned starts at both origins, and let existing calls …