An operational alert points to a contract bug that appears only under mixed production data. The affected area is admin API.
Repair the admin API request stream implementation so it enforces a per-key sliding window and reports allowed and rejected requests.
Evidence
- Affected surface: Flask / admin API.
- Observed failure family: apply a sliding rate window.
- Scope policy: authorized must equal true.