Your Web Service Has a Graceful Shutdown Path. That's the Bug.
Crash-only software treats every failure as a crash and every startup as a recovery.
Your web service has a shutdown handler. It flushes buffers, closes connections, writes checkpoints. You tested it once, maybe. In production, it probably runs…