A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is rate limiter.
Repair the rate limiter activity stream implementation so it splits activity after the configured inactivity gap and counts sessions per actor.
Evidence
- Affected surface: Fastify / rate limiter.
- Observed failure family: sessionize event activity.
- Scope policy: retained must equal true.