a cache key is part of correctness

If a response depends on tenant, locale, or permissions, include those dimensions in the cache key or avoid sharing that cached response. A key that leaves out an input can return the wrong result even when the cached value itself is valid.