A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is checkout API.
Repair the checkout API dependent jobs implementation so it produces a deterministic dependency order and reports blocked cyclic work.
Evidence
- Affected surface: Express / checkout API.
- Observed failure family: order dependent work.
- Scope policy: tenantId must equal tenant-primary.