fix(cluster): gossiped-role predicates compare case-insensitively — a miscased peer no longer un-elects the Primary

src/Server/ZB.MOM.WW.OtOpcUa.Runtime/Drivers/DriverHostActor.cs

@@ -5,6 +5,7 @@ using Akka.Event;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Logging.Abstractions;
+using ZB.MOM.WW.OtOpcUa.Cluster;
 using ZB.MOM.WW.OtOpcUa.Commons.Engines;
 using ZB.MOM.WW.OtOpcUa.Commons.Interfaces;
 using ZB.MOM.WW.OtOpcUa.Commons.Messages.Admin;
@@ -1608,8 +1609,12 @@ public sealed class DriverHostActor : ReceiveActor, IWithTimers, IWithUnboundedS
         if (_driverMemberCountProvider is not null) return _driverMemberCountProvider();
         try
         {
+            // R3-04 (01/C-9): GossipedRolesHave, not ordinal Contains — a peer gossiping a miscased
+            // 'Driver' (rolling-upgrade window) must still count toward the R2-04 primary-gate member
+            // count, or a genuine 2-node pair silently takes the single-node allow branch.
             return Akka.Cluster.Cluster.Get(Context.System).State.Members
-                .Count(m => m.Status == Akka.Cluster.MemberStatus.Up && m.Roles.Contains(ServiceCollectionExtensions.DriverRole));
+                .Count(m => m.Status == Akka.Cluster.MemberStatus.Up
+                    && RoleParser.GossipedRolesHave(m.Roles, ServiceCollectionExtensions.DriverRole));
         }
         catch (Exception)
         {