A production request path returns inconsistent decisions during retries and concurrent updates. The affected area is authorization guard.
Repair the authorization guard performance telemetry implementation so it computes a fixed-width rolling average in event order.
Evidence
- Affected surface: NestJS / authorization guard.
- Observed failure family: compute rolling metrics.
- Scope policy: region must equal eu-west.