A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is authorization guard.
Repair the authorization guard cache lifecycle implementation so it separates purge, refresh, and escalation actions by staleness and risk.
Evidence
- Affected surface: NestJS / authorization guard.
- Observed failure family: plan cache invalidation.
- Scope policy: region must equal eu-west.