A production request path returns inconsistent decisions during retries and concurrent updates. The affected area is ORM queryset.
Repair the ORM queryset cache lifecycle implementation so it separates purge, refresh, and escalation actions by staleness and risk.
Evidence
- Affected surface: Django / ORM queryset.
- Observed failure family: plan cache invalidation.
- Scope policy: tenantId must equal tenant-primary.