A high-traffic UI flow produces inconsistent ordering between initial load and refresh. The affected area is checkout state.
Repair the checkout state sensitive records implementation so it redacts configured sensitive fields without mutating unrelated values.
Evidence
- Affected surface: React / checkout state.
- Observed failure family: redact sensitive fields.
- Scope policy: tenantId must equal tenant-primary.