A service boundary accepts valid traffic but mishandles duplicate, stale, or unauthorized records. The affected area is webhook route.
Repair the webhook route lifecycle transitions implementation so it accepts only declared state transitions and reports rejected requests.
Evidence
- Affected surface: Flask / webhook route.
- Observed failure family: validate state transitions.
- Scope policy: qualityState must equal verified.