A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is ORM queryset.
Repair the ORM queryset reporting metrics implementation so it groups records once and returns accurate counts and totals.
Evidence
- Affected surface: Django / ORM queryset.
- Observed failure family: aggregate grouped totals.
- Scope policy: tenantId must equal tenant-primary.