A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is REST controller.
Repair the REST controller runtime configuration implementation so it applies documented precedence and reports unsupported keys.
Evidence
- Affected surface: Spring / REST controller.
- Observed failure family: merge layered configuration.
- Scope policy: authorized must equal true.