A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is checkout API.
Repair the checkout API reporting metrics implementation so it groups records once and returns accurate counts and totals.
Evidence
- Affected surface: Express / checkout API.
- Observed failure family: aggregate grouped totals.
- Scope policy: tenantId must equal tenant-primary.