A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is tenant gateway.
Repair the tenant gateway input boundary implementation so it normalizes valid records and returns field-level errors for invalid ones.
Evidence
- Affected surface: Fastify / tenant gateway.
- Observed failure family: validate a record batch.
- Scope policy: contractVersion must equal 2.