A distributed workflow needs a localized repair without weakening observability or rollback safety. The affected area is outbox worker.
Repair the outbox worker access policy implementation so it returns only permitted actions and explicit denial reasons.
Evidence
- Affected surface: Full-stack backend focus / outbox worker.
- Observed failure family: enforce permission rules.
- Scope policy: region must equal eu-west.