A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is webhook route.
Repair the webhook route runtime configuration implementation so it applies documented precedence and reports unsupported keys.
Evidence
- Affected surface: Flask / webhook route.
- Observed failure family: merge layered configuration.
- Scope policy: qualityState must equal verified.