A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is data migration.
Repair the data migration sensitive records implementation so it redacts configured sensitive fields without mutating unrelated values.
Evidence
- Affected surface: Django / data migration.
- Observed failure family: redact sensitive fields.
- Scope policy: zoneState must equal healthy.