A production rollout exposes a contract mismatch between the UI boundary and the owning service. The affected area is session boundary.
Repair the session boundary runtime configuration implementation so it applies documented precedence and reports unsupported keys.
Evidence
- Affected surface: Full-stack frontend focus / session boundary.
- Observed failure family: merge layered configuration.
- Scope policy: authorized must equal true.