A high-traffic UI flow produces inconsistent ordering between initial load and refresh. The affected area is route loader.
Repair the route loader access policy implementation so it returns only permitted actions and explicit denial reasons.
Evidence
- Affected surface: React / route loader.
- Observed failure family: enforce permission rules.
- Scope policy: cohort must equal stable.