A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is permission policy.
Repair the permission policy performance telemetry implementation so it computes a fixed-width rolling average in event order.
Evidence
- Affected surface: Django / permission policy.
- Observed failure family: compute rolling metrics.
- Scope policy: authorized must equal true.