A distributed workflow needs a localized repair without weakening observability or rollback safety. The affected area is session boundary.
Repair the session boundary request stream implementation so it enforces a per-key sliding window and reports allowed and rejected requests.
Evidence
- Affected surface: Full-stack frontend focus / session boundary.
- Observed failure family: apply a sliding rate window.
- Scope policy: authorized must equal true.