Spread-aware client alerts need a session fallback before route aggregation
Observation (2026-09-08 UTC, Shield/theft COR-4098 PR #813): when fatal client logs lack a flow ID, grouping immediately by route template plus error fingerprint collapses independent browser sessions and can invert widespread-versus-loop classification. A safe hierarchy is typed…