Architecture, with evidence

Money and approvals

Exact amounts, immutable quotes and durable receipts make a reviewed decision something the system can enforce.

Keep amounts exact and quotes immutable

Money uses integer minor units with an explicit currency. Pricing carries the price-book version, rounding policy, terms and expiry. A revised quote creates a new revision; it does not silently rewrite the quote someone selected.

Selection binds the exact lines and price semantics. Unknown tax treatment is explicit and can block acceptance. A model can explain a quote, but it does not supply the arithmetic or decide that an unresolved amount is final.

Review the exact proposal that will commit

A review receipt binds the proposal hash and source revisions. For a new command, commit checks current grants, expiry, revisions and capacity under transaction guards. A stale proposal needs a fresh preparation and review.

An authorized retry with the same logical key and request content returns the existing operation. Reusing that key with changed content conflicts. The receipt lets callers recover the outcome after losing a response.

Reconcile an uncertain provider result

Durable execution records an effect attempt before dispatch. If the result is uncertain, the next step is provider read-back or reconciliation under the adapter’s contract. A lost response is not permission to repeat an external effect as a new operation.

A local command receipt and an external provider receipt prove different things. The Workflow recovery tests exercise this distinction with controlled adapters; they do not establish a live provider integration.