get_config was calling planner.apply_payload on every GET request, racing concurrent reads on module-level globals. Added a _hydrated flag + lock so DB hydration runs at most once per process lifetime; put_config marks it done too. Test fixture resets the flag between tests.