A production request path returns inconsistent decisions during retries and concurrent updates. The affected area is application factory.
Repair the application factory request stream implementation so it enforces a per-key sliding window and reports allowed and rejected requests.
Evidence
- Affected surface: Flask / application factory.
- Observed failure family: apply a sliding rate window.
- Scope policy: tenantId must equal tenant-primary.