A production rollout exposes a contract mismatch between the UI boundary and the owning service. The affected area is account settings.
Repair the account settings state synchronization implementation so it accepts compatible server updates and surfaces version conflicts without losing local intent.
Evidence
- Affected surface: Balanced full-stack / account settings.
- Observed failure family: reconcile optimistic state.
- Scope policy: tenantId must equal tenant-primary.