A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is notification API.
Repair the notification API capacity pool implementation so it allocates limited capacity by priority without exceeding demand or the global limit.
Evidence
- Affected surface: Express / notification API.
- Observed failure family: allocate limited capacity.
- Scope policy: contractVersion must equal 2.