A production request path returns inconsistent decisions during retries and concurrent updates. The affected area is authorization guard.
Repair the authorization guard lifecycle transitions implementation so it accepts only declared state transitions and reports rejected requests.
Evidence
- Affected surface: NestJS / authorization guard.
- Observed failure family: validate state transitions.
- Scope policy: region must equal eu-west.