A production request path returns inconsistent decisions during retries and concurrent updates. The affected area is authorization guard.
Repair the authorization guard runtime configuration implementation so it applies documented precedence and reports unsupported keys.
Evidence
- Affected surface: NestJS / authorization guard.
- Observed failure family: merge layered configuration.
- Scope policy: region must equal eu-west.