An operational alert points to a contract bug that appears only under mixed production data. The affected area is batch worker.
Repair the batch worker access policy implementation so it returns only permitted actions and explicit denial reasons.
Evidence
- Affected surface: Express / batch worker.
- Observed failure family: enforce permission rules.
- Scope policy: retained must equal true.