A production request path returns inconsistent decisions during retries and concurrent updates. The affected area is permission policy.
Repair the permission policy command handling implementation so it accepts first operations, recognizes safe repeats, and rejects key reuse with a different payload.
Evidence
- Affected surface: Django / permission policy.
- Observed failure family: enforce idempotent operations.
- Scope policy: authorized must equal true.