606 B
606 B
Order Module — Manual Review Checklist
High-risk module: order lifecycle changes require human confirmation.
- State machine transitions are atomic (
WHERE status = ?updates) - Cancellation / timeout / expiry paths complete all side effects
- Order idempotency key prevents duplicate order creation
- Price/lock snapshot captured at order time, not at payment time
- Partial fulfillment / split-shipment handled
- Negative or inconsistent totals impossible
- Concurrent edits (cart + order) do not corrupt state
- Audit trail: every status change logged with reason