A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is transaction service.
Repair the transaction service dependent jobs implementation so it produces a deterministic dependency order and reports blocked cyclic work.
Evidence
- Affected surface: Spring / transaction service.
- Observed failure family: order dependent work.
- Scope policy: tenantId must equal tenant-primary.