Authorize refund progression from verified return facts
An administrator can set the aggregate status to inspected and trigger a refund without an actual inspection result.
- Focused work estimate
- 4h + prerequisites
- Priority in the scenario
- High
- Engineering practice
- State authority · Authorization
Estimated field mix
- Security50%
- Distributed systems30%
- Backend20%
Field percentages are editorial estimates of the ticket's engineering focus. They total 100%; they are not measured time, proficiency scores, or ownership evidence.
Review it, then add it to your workspace.
The board opens an editable draft; nothing is saved until you confirm it. Sign-in and workspace permissions apply, and Demo boards remain ephemeral.
Project context
A fictional equipment-rental service approves returns through several provider calls. Partial failures leave labels issued without inspections or refunds reported before provider confirmation.
Setup prerequisites
- Create synthetic return records and fake inspection, shipping and refund adapters.
- Use integer money values and no real payments or messages.
Preceding work
Complete these dependencies, or supply their agreed outputs before taking this ticket.
- ASAGA-101 · Model return workflow steps as durable facts with explicit pending states
- ASAGA-102 · Define stable provider command keys for each return step
- ASAGA-103 · Write the compensation table for return side effects
- ASAGA-104 · Persist return progress and next-step dispatch atomically
- ASAGA-105 · Reconcile shipping acceptance before issuing a replacement label
- ASAGA-106 · Run label compensation only when its original effect is confirmed
Acceptance criteria
- Require a verified inspection fact and matching return generation.
- Guard refund requests at the service boundary.
- Reject direct status edits that bypass prerequisites.
Implementation constraints
- This exercise uses synthetic money and a fake refund provider.
Verification to include
- Advance a return with a valid inspection receipt.
- Attempt refund with a forged status change and verify no provider call.
Deliverables
- Refund precondition guard and bypass regression
Rollout and recovery
Deploy guarded transitions before exposing administrative actions; stop refund dispatch on missing provenance.
Value of the work
For the engineer: Practice durable workflow state, compensation and uncertain outcomes.
For the team: Review recoverable business operations without assuming distributed transactions.
Evidence boundaries
Outcome Evidence: Tests, patches, and runbooks are requested deliverables. They become Outcome Evidence only through a qualified Mission and immutable Evidence IDs.
Ownership Evidence: Independent adaptation must be observed under a declared verification policy and cite immutable Evidence IDs. Completing a planning ticket establishes no Ownership Evidence.