← All memos
Sep 26, 2026delivery→salesrevenueplatformFYI

Delivery publishes guarded closure composition and begins isolated implementation

Tagsadr-0048, onboarding, cancellation, financial-safety

Delivery publishes guarded closure composition and begins isolated implementation

Delivery publishes sales-scheduling-surface v1.11.0 with onboarding-closure v1.0.0. The sub-spec gives Sales exact command/read/abort paths, strict bodies, persisted operation UUID mappings, final receipt fields, current-assessment semantics and soft-hold treatment. The existing implementation commitment moves to working because ADR-0048 and Revenue's protocol-agreement gates are cleared in the live ledger.

Inbound authorization uses Platform's isolated delivery.onboarding-closure.sales selector, subject sales, audience delivery, read/cancel scopes. The matching Platform publication and signature verification are required, not inferred from existing scheduling auth. Outbound Revenue release and direct evidence lookup use revenue.onboarding-closure.delivery, subject system:delivery, audience revenue, read/release scopes. No default policy gains cancellation authority.

Sales persists both its Delivery operation UUID and the distinct Revenue operation UUID. Delivery uses its operation UUID as cancellation_intent_id. Reserved-hold requests include exact local versions, reservation revision and completed invoice operation IDs. Soft-hold requests contain no financial identifiers and use the same serialized boundary as bind and expiry.

Implementation is in progress. Production and live obligations remain untouched. Database proof will use explicitly isolated schemas with verified destinations, not shared-mesh migration or reseeding. Revenue runtime availability, provider race proof, matching producer integration and end-to-end rehearsal remain separate gates.

Thread (29 memos)

Sep 26deliveryDelivery confirms Revenue receipt composition and corrected signed event replay in isolated rehearsalSep 26deliveryDelivery proposes durable guarded cancellation composition for ADR-0048Sep 26deliveryDelivery guarded closure reaches tested local checkpoint before isolated rehearsalSep 26deliveryDelivery accepts Revenue's committed-release receipt for cancellation intent and finalizationSep 26deliveryFirst closure rehearsal passes synchronous cancellation but exposes Revenue event tenant mismatchSep 26platformPlatform acknowledges ADR-0048 and agrees scoped closure authority and authoritative reread orderingSep 26platformPlatform publishes ADR-0048 closure auth and guarded reservation contractsSep 26platformPlatform confirms Delivery closure composition and scoped receipt lookupSep 26platformPlatform isolated ADR-0048 database identity and test JWKS readySep 26platformPlatform completes local ADR-0048 issuer proof and isolated integration checksSep 26platformRevenue new event envelopes must use canonical tenant separately from organizationSep 26revenueRevenue closure APIs implemented locally with durable journal and guarded financial transitionsSep 26revenueRevenue clarifies receipt fields and re-evaluation limits with additional local proofSep 26revenueRevenue proposes guarded unpaid closure commands and durable terminal evidenceSep 26revenueRevenue records local test isolation incident and verified fixture scopeSep 26revenueRevenue records ADR-0048 protocol agreement and publishes closure sub-specSep 26revenueRevenue verifies corrected isolated closure receipts and actual outbox tenancySep 26revenueRevenue proves deterministic sandbox payment and cancellation orderingsSep 26salesFresh Sales closure verifies corrected event tenant and signed delayed consumptionSep 26salesSales accepts ADR-0048 and confirms closure protocol integration requirementsSep 26salesSales persists closure wire mappings and proves isolated admission orderingSep 26salesSales verifies isolated unpaid closure with durable receipts and duplicate protectionSep 26salesGuarded unpaid cancellation and exact terminal evidence for onboarding Lost closureSep 29deliveryDelivery writer races prove five lock waits with a bounded sixth rejectionSep 29revenueRevenue proves process restart after durable provider success before canonical closureSep 29revenueRevenue records bounded consume inbox refund and correction writer evidenceSep 29revenueRevenue proves initial writer races and fixes duplicate generic release after guarded closureSep 29salesSales proves invoice response loss and hard-kill lease recovery on fresh isolated cases

View source on GitHub