A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is permission policy.
Repair the permission policy lifecycle transitions implementation so it accepts only declared state transitions and reports rejected requests.
Evidence
- Affected surface: Django / permission policy.
- Observed failure family: validate state transitions.
- Scope policy: authorized must equal true.