A production request path returns inconsistent decisions during retries and concurrent updates. The affected area is ORM queryset.
Repair the ORM queryset input boundary implementation so it normalizes valid records and returns field-level errors for invalid ones.
Evidence
- Affected surface: Django / ORM queryset.
- Observed failure family: validate a record batch.
- Scope policy: tenantId must equal tenant-primary.