Source: MIZOKI audit 2026-09-06 (pinned fc8b03f9) → work-order backlog 2026-09-08 (docs/audits/AUDIT_WORK_ORDERS_2026-09-08.md). Findings are hypotheses until reproduced on current main (WO-00).

Finding: Concurrent redemption of one approval issued two distinct authorization IDs [R7]. Files: services/service-decision-control-plane/main.py (approval redemption); Firestore/DB layer. Fix: atomic claim on the decision/approval; deterministic authorization ID derived from (approval_id, decision_fingerprint); retries return the same stored result. Acceptance: 50-way concurrent redemption test → exactly one authorization ID; crash-after-write retry → same ID; contention at every write boundary covered. Depends on: WO-03.