Checkout: Risk, testing, and operations
Defines a server-authoritative checkout workflow with priced snapshots, idempotent provider sessions, verified asynchronous fulfillment, inventory or entitlement safeguards, and reconciliation evidence.
Marketplace flows separate order, payment, payout, refund, and dispute states with explicit handling for uncertain payment-provider outcomes so partial failures never double-charge or double-pay sellers.