yellow is cc, blue is vbus.
turns out the way we were using our usb esd diode means some of the voltage from CC ends up on vbus(!!).
thankfully i've found a cheap drop-in replacement that won't have this issue (it's actually specced a little nicer for our use case too)