An operational alert points to a contract bug that appears only under mixed production data. The affected area is application factory.
Repair the application factory lifecycle transitions implementation so it accepts only declared state transitions and reports rejected requests.
Evidence
- Affected surface: Flask / application factory.
- Observed failure family: validate state transitions.
- Scope policy: tenantId must equal tenant-primary.