A distributed workflow needs a localized repair without weakening observability or rollback safety. The affected area is account settings.
Repair the account settings runtime configuration implementation so it applies documented precedence and reports unsupported keys.
Evidence
- Affected surface: Balanced full-stack / account settings.
- Observed failure family: merge layered configuration.
- Scope policy: tenantId must equal tenant-primary.