A production request path returns inconsistent decisions during retries and concurrent updates. The affected area is ORM queryset.
Repair the ORM queryset module boundary implementation so it ranks change-prone modules, preserves ownership boundaries, and identifies where characterization tests are required before extraction.
Evidence
- Affected surface: Django / ORM queryset.
- Observed failure family: choose a safe refactoring boundary.
- Scope policy: tenantId must equal tenant-primary.