A high-traffic UI flow produces inconsistent ordering between initial load and refresh. The affected area is DOM event flow.
Repair the DOM event flow access policy implementation so it returns only permitted actions and explicit denial reasons.
Evidence
- Affected surface: Web platform / DOM event flow.
- Observed failure family: enforce permission rules.
- Scope policy: tenantId must equal tenant-primary.