A production request path returns inconsistent decisions during retries and concurrent updates. The affected area is checkout API.
Repair the checkout API request stream implementation so it enforces a per-key sliding window and reports allowed and rejected requests.
Evidence
- Affected surface: Express / checkout API.
- Observed failure family: apply a sliding rate window.
- Scope policy: tenantId must equal tenant-primary.