How a single one-line change in the ingestion path broke time-window queries for 17 seconds across Frankfurt and us-east-1, and the three guard-rails added after.