May 2026 monthly summary for envoyproxy/gateway: Delivered a critical fix to policy matching correctness. When multiple BackendTLSPolicies target the same backend, the policy with an explicit sectionName is now preferred over wildcard matches, preventing silent drops and ensuring explicit policies are honored. Added passing tests that demonstrate the previous wildcard overriding sectioned policies and adjusted the translator to reflect the specificity order used by SecurityPolicy. Release notes updated accordingly. This work improves routing reliability, reduces misrouting risk, and strengthens security posture by enforcing explicit policy intent. Technologies/skills demonstrated include Go code changes, policy translator refinements, test-driven development, and collaborative release-note alignment.