A state restoration path produces a user-visible duplicate after an interrupted session. The affected area is widget state.
Repair the widget state access policy implementation so it returns only permitted actions and explicit denial reasons.
Evidence
- Affected surface: Flutter / widget state.
- Observed failure family: enforce permission rules.
- Scope policy: tenantId must equal tenant-primary.