A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is rate limiter.
Repair the rate limiter cache lifecycle implementation so it separates purge, refresh, and escalation actions by staleness and risk.
Evidence
- Affected surface: Fastify / rate limiter.
- Observed failure family: plan cache invalidation.
- Scope policy: retained must equal true.