Skip to main content
Start an investigation with workspace, partner, document/reference, timestamp, and correlation ID. Preserve the original request and observations before making a recovery change. Orders and recovery covers uncertain generation.

Inspect the right outcome

Order lists are bounded; the source returns at most 200 orders with a truncated flag. Do not treat loaded rows or a terminal filter as a complete history. Scope lifecycle and evidence by partner where references repeat.
A 997 means functional acknowledgment, not fulfillment or payment. Generated, queued, transport-accepted, functionally acknowledged, and business-complete are separate states. Missing receipt fields are unknown; historical receipts do not complete a current attempt.

Exceptions and deductions

/v1/operations/exceptions connects source failures to review cases, owners, deadlines, optimistic revisions, and immutable history. Read the latest case and source evidence before a PATCH. A review status cannot overwrite the source delivery outcome. Resolve revision conflicts by reading again and reviewing changed evidence. Deductions support capture, categorization, dispute, evidence, and terminal outcomes through /v1/deductions. Partner-scoped evidence helps explain a dispute; an exported bundle does not establish the counterparty agreed or money was recovered.

Recover deliberately

Review downstream duplicate handling before any repeat. The CLI checks recovery receipt identity and counts; malformed HTTP 200 responses can remain outcome_unknown. Inspect state instead of automatically retrying. Requeue acknowledgment does not prove delivery.

Monitoring and audit

/v1/monitoring and /v1/status-board show current observations. Calling POST /v1/monitoring/evaluate can send configured alerts. Webhook and email alert channels are external effects; list/read operations are separate. The immutable audit log records actors and operations. Export evidence with its actual identifiers and timestamps.

Retention defaults

Current source enables bounded retention. 0 disables a sweep; it is not the default. Sweeps run on the monitor leader and protect relevant pending work. Pruning dedup entries reopens the replay window. Retention is not a complete tenant-erasure workflow; outbound receipts and frozen connection/key references need explicit handling. Review deployment and recovery evidence before depending on backups, rollback, or operating objectives.
Last modified on October 20, 2026