Inspect the right outcome
Order lists are bounded; the source returns at most 200 orders with a
truncated flag.
Do not treat loaded rows or a terminal filter as a complete history. Scope lifecycle and
evidence by partner where references repeat.
Exceptions and deductions
/v1/operations/exceptions connects source failures to review cases, owners, deadlines,
optimistic revisions, and immutable history. Read the latest case and source evidence
before a PATCH. A review status cannot overwrite the source delivery outcome. Resolve
revision conflicts by reading again and reviewing changed evidence.
Deductions support capture, categorization, dispute, evidence, and terminal outcomes through
/v1/deductions. Partner-scoped evidence helps explain a dispute; an exported bundle does
not establish the counterparty agreed or money was recovered.
Recover deliberately
Review downstream duplicate handling before any repeat. The CLI checks recovery receipt
identity and counts; malformed HTTP 200 responses can remain
outcome_unknown. Inspect
state instead of automatically retrying. Requeue acknowledgment does not prove delivery.
Monitoring and audit
/v1/monitoring and /v1/status-board show current observations. Calling
POST /v1/monitoring/evaluate can send configured alerts. Webhook and email alert channels
are external effects; list/read operations are separate. The immutable audit log records
actors and operations. Export evidence with its actual identifiers and timestamps.
Retention defaults
Current source enables bounded retention.0 disables a sweep; it is not the default.
Sweeps run on the monitor leader and protect relevant pending work.
Pruning dedup entries reopens the replay window. Retention is not a complete tenant-erasure
workflow; outbound receipts and frozen connection/key references need explicit handling.
Review deployment and recovery evidence
before depending on backups, rollback, or operating objectives.