A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is rate limiter.
Repair the rate limiter capacity pool implementation so it allocates limited capacity by priority without exceeding demand or the global limit.
Evidence
- Affected surface: Fastify / rate limiter.
- Observed failure family: allocate limited capacity.
- Scope policy: retained must equal true.