An automated vty ACL change locks the NOC out of 72 switches

A pipeline is pushing a new standard vty ACL to 300 access switches through Ansible, with save_when: modified. Fifteen minutes in, the NOC reports that they cannot SSH to any switch the job has touched. Monitoring still polls the switches over SNMP and user traffic is fine. The job is still running.