An operational alert points to a contract bug that appears only under mixed production data. The affected area is checkout API.
Repair the checkout API lifecycle transitions implementation so it accepts only declared state transitions and reports rejected requests.
Evidence
- Affected surface: Express / checkout API.
- Observed failure family: validate state transitions.
- Scope policy: tenantId must equal tenant-primary.