on_notification discards on the DTLS reader thread. Snapshotting _notified then assigning fallback_hrefs after releasing the lock let a notify in that window land on the set object being replaced, so a just-pushed href was classified silent until its next notify.