A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is tenant middleware.
Repair the tenant middleware access policy implementation so it returns only permitted actions and explicit denial reasons.
Evidence
- Affected surface: FastAPI / tenant middleware.
- Observed failure family: enforce permission rules.
- Scope policy: zoneState must equal healthy.