An operational alert points to a contract bug that appears only under mixed production data. The affected area is plugin boundary.
Repair the plugin boundary access policy implementation so it returns only permitted actions and explicit denial reasons.
Evidence
- Affected surface: Fastify / plugin boundary.
- Observed failure family: enforce permission rules.
- Scope policy: region must equal eu-west.