A cross-layer workflow passes unit tests but breaks when client, API, and persistence state arrive in a different order. The affected area is session boundary.
Repair the session boundary sensitive records implementation so it redacts configured sensitive fields without mutating unrelated values.
Evidence
- Affected surface: Full-stack frontend focus / session boundary.
- Observed failure family: redact sensitive fields.
- Scope policy: authorized must equal true.