An operational alert points to a contract bug that appears only under mixed production data. The affected area is upload service.
Repair the upload service dependency protection implementation so it opens only after the failure threshold and calculates a deterministic retry time.
Evidence
- Affected surface: FastAPI / upload service.
- Observed failure family: calculate circuit-breaker state.
- Scope policy: retained must equal true.