A state restoration path produces a user-visible duplicate after an interrupted session. The affected area is screen state.
Repair the screen state sensitive records implementation so it redacts configured sensitive fields without mutating unrelated values.
Evidence
- Affected surface: iOS / Swift / screen state.
- Observed failure family: redact sensitive fields.
- Scope policy: tenantId must equal tenant-primary.