A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is file gateway.
Repair the file gateway access policy implementation so it returns only permitted actions and explicit denial reasons.
Evidence
- Affected surface: Express / file gateway.
- Observed failure family: enforce permission rules.
- Scope policy: zoneState must equal healthy.