A production request path returns inconsistent decisions during retries and concurrent updates. The affected area is checkout API.
Repair the checkout API input boundary implementation so it normalizes valid records and returns field-level errors for invalid ones.
Evidence
- Affected surface: Express / checkout API.
- Observed failure family: validate a record batch.
- Scope policy: tenantId must equal tenant-primary.