Tampering. The backend trusts quotedPriceUsd instead of the rate card in the database. A compromised frontend pod has no raw SQL credentials to the invoicing ledger. The worker authenticates the service caller and validates the schema.