A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is upload service.
Repair the upload service input boundary implementation so it normalizes valid records and returns field-level errors for invalid ones.
Evidence
- Affected surface: FastAPI / upload service.
- Observed failure family: validate a record batch.
- Scope policy: retained must equal true.