A production request path returns inconsistent decisions during retries and concurrent updates. The affected area is checkout API.
Repair the checkout API capacity pool implementation so it allocates limited capacity by priority without exceeding demand or the global limit.
Evidence
- Affected surface: Express / checkout API.
- Observed failure family: allocate limited capacity.
- Scope policy: tenantId must equal tenant-primary.