A device lifecycle boundary exposes stale data when network and local state disagree. The affected area is push inbox.
Repair the push inbox access policy implementation so it returns only permitted actions and explicit denial reasons.
Evidence
- Affected surface: React Native / push inbox.
- Observed failure family: enforce permission rules.
- Scope policy: retained must equal true.