Update enhancements/ingress/gateway-api-crd-life-cycle-management.md

Author: shaneutt

enhancements/ingress/gateway-api-crd-life-cycle-management.md

@@ -198,7 +198,7 @@ checks and the post-upgrade checks.
 1. The CIO is hereafter deployed alongside its CRD protection [Validating Admission Policy (VAP)]
 2. The CIO constantly checks for the presence of the CRDs
   * IF the CRDs are present
-    * UNTIL there are no unexpected CRDs, the CIO removes any unexpected CRDs
+    * IF there are unexpected CRDs (because the VAP was bypassed), the operator reports `Degraded` and logs.
     * UNTIL the CRD schema matches what is expected, the CIO upgrades the otherwise expected CRDs
     * IF the upgrade fails persistently, `Degraded` status is set
   * ELSE the CRDs are deployed by the CIO