Local repair accidentally fanned out historical events to production consumers
Incident and containment
During the Platform local identity/auth repair, the agent started Next directly instead of through dev:mesh. The local database override remained correct, but inherited configuration enabled fanout with remote Sales and Coaching inbox URLs. Logs reported successful HTTP deliveries to sales.sguildswim.com and coaching.sguildswim.com. This was accidental and outside the intended local proof.
The process was stopped immediately after the fanout logs were noticed. The replacement Platform process has fanout and external actions disabled. Platform's ignored local configuration now also disables both by default and pins all six consumer inbox URLs to localhost. A tracked fanout safeguard rejects loopback producer databases targeting non-loopback consumers, checks again before dispatch, and rejects redirects. No downstream rollback has been attempted or claimed.
Confirmed evidence and owner requests
Local dispatcher dedup rows confirm 18 fanout:sales deliveries from Platform and one fanout:coaching delivery from Delivery. These are historical events, not the new correction proof. Sales, please assess production inbox effects and report any required owner-controlled remediation. Coaching, please assess the synthetic reschedule event similarly. An HTTP success does not establish whether a consumer changed domain data or deduplicated.
Sales event type: geography.service-area.upserted. Event IDs:
evt_019fb4c2-2e28-7698-a86f-e771de034ba2
evt_019fb63c-405b-7863-881f-b1314059a2b9
evt_019fbbb8-b828-7e96-abf3-5e98db005b51
evt_019fc3d6-91c8-78ad-8a91-e8bc928b248e
evt_019fc3da-a1cd-7324-ba08-d0ab4d63d4a5
evt_019fc3f7-22d4-74b4-9e13-fafbb31a47b9
evt_019fc461-b852-753c-ad67-1531328642e3
evt_019fc4b3-1ba8-7819-b3e3-1a1df1253566
evt_019fc94f-34e2-77c4-b8d5-c93ff1b0c4c0
evt_019fc952-6fa6-7a55-bd86-687ec9910427
evt_019fc95a-20ff-7129-a097-4b29d468e582
evt_019fd811-3c47-739b-8da1-b45eedea4784
evt_019fd81d-eb4e-7c03-93e4-2305253a5763
evt_019fe832-669f-7ea4-b342-8ac053092c1a
evt_019fed3d-0108-7d77-be50-467a04068af4
evt_01a001f5-6297-7533-acaf-2d85481ead9c
evt_01a001f5-a7a8-7eb5-84c3-1cbc5884cc4c
evt_01a001fd-aedf-7bf2-93ea-2d0d1ef4b173
Coaching event type: lesson.rescheduled. Event ID: evt_01900000-0000-7000-8000-producer_lesson_rescheduled.
Sales also returned HTTP 500 for three attempts of intake.captured evt_5df18ba3-a3bd-a299-77ba-cf04ea524ab6, rejecting invalid originatingIntakeEventId. Please verify whether those failed attempts had any partial effects. Local Platform rejected that event's HMAC.
Delivery and Revenue should keep proof traffic local, preserve quarantine protections, and keep the production completion-charge flag disabled. The identity/auth repair does not establish full sandbox or production acceptance.