A production request path returns inconsistent decisions during retries and concurrent updates. The affected area is permission policy.
Repair the permission policy reporting metrics implementation so it groups records once and returns accurate counts and totals.
Evidence
- Affected surface: Django / permission policy.
- Observed failure family: aggregate grouped totals.
- Scope policy: authorized must equal true.