diff --git a/iam/src/test/java/com/baiyue/iam/controller/PlatformTenantControllerContractTest.java b/iam/src/test/java/com/baiyue/iam/controller/PlatformTenantControllerContractTest.java
index b2ed7fb78..33b1c9c2a 100644
--- a/iam/src/test/java/com/baiyue/iam/controller/PlatformTenantControllerContractTest.java
+++ b/iam/src/test/java/com/baiyue/iam/controller/PlatformTenantControllerContractTest.java
@@ -30,7 +30,7 @@ class PlatformTenantControllerContractTest {
                 method.getAnnotation(PreAuthorize.class).value());
         assertNotNull(annotation(method, 0, Min.class));
         assertNotNull(annotation(method, 1, Min.class));
-        assertEquals(200, annotation(method, 1, Max.class).value());
+        assertEquals(1000, annotation(method, 1, Max.class).value());
         assertEquals("PROFILE_REQUIRED|PENDING|ACTIVE|REJECTED|DISABLED",
                 annotation(method, 3, Pattern.class).regexp());
 
diff --git a/iam/src/test/java/com/baiyue/iam/repository/OverseasPhase4PermissionSqlContractTest.java b/iam/src/test/java/com/baiyue/iam/repository/OverseasPhase4PermissionSqlContractTest.java
index 478209543..6494d233d 100644
--- a/iam/src/test/java/com/baiyue/iam/repository/OverseasPhase4PermissionSqlContractTest.java
+++ b/iam/src/test/java/com/baiyue/iam/repository/OverseasPhase4PermissionSqlContractTest.java
@@ -44,6 +44,7 @@ class OverseasPhase4PermissionSqlContractTest {
     private static final List<String> REQUIRED = List.of(
         "platform:overseas-warehouse:last-mile-order:list",
         "platform:overseas-warehouse:discard:list",
+        "platform:overseas-warehouse:discard:approve",
         "platform:overseas-warehouse:warehouse-transfer:approve",
         "platform:overseas-warehouse:inbound-order:list",
         "platform:overseas-warehouse:inbound-order:fba-appointment",
@@ -76,7 +77,7 @@ class OverseasPhase4PermissionSqlContractTest {
         assertThat(sql).contains(REQUIRED.toArray(String[]::new));
         assertThat(sql).contains("'lastleg:pda:operate'");
         assertPdaPickerGrant(sql);
-        assertThat(catalog).hasSize(70).noneMatch(code -> code.endsWith(":view"));
+        assertThat(catalog).hasSize(71).noneMatch(code -> code.endsWith(":view"));
         assertThat(sql).contains(
             "(5107003,0,'PLATFORM','BUTTON',5107000,'platform:overseas-warehouse:warehouse-transfer:approve'");
         assertThat(sql).contains("CALL assert_warehouse_transfer_approval_permission()",
@@ -157,6 +158,9 @@ class OverseasPhase4PermissionSqlContractTest {
         // Vehicle care already declares this guard directly on its finance-submit facade.
         serviceCatalog.addAll(codes(repositoryFile(
             "lastleg-service/src/main/java/com/baiyue/lastleg/fleet/maintenance/PlatformVehicleCareFinanceController.java")));
+        // Cargo discard declares its approval guard directly in the service.
+        serviceCatalog.addAll(codes(repositoryFile(
+            "lastleg-service/src/main/java/com/baiyue/lastleg/discard/service/CargoDiscardService.java")));
 
         assertThat(serviceCatalog).containsExactlyInAnyOrderElementsOf(moduleCatalog);
     }