01must proveConfirmed | The causing payment, refund or reversal and its settlement item share one transaction, including rollback; settlement recording rejects calls outside a transaction. | invariant | service | test |
02must proveConfirmed | An effect key identifies one recorded item: matching retries return it, while reuse for a different amount is rejected. | invariant | service, database | test |
03must proveConfirmed | Captures, chargeback reversals, reserve releases and fee refunds increase the deposit; refunds, voids, chargebacks, returns, fees and holds reduce it; adjustments allow either nonzero sign. ✓ A refund of -20000 is stored.✗ A refund of +20000 is refused, naming the amount. | invariant | service, database | test |
04must proveConfirmed | Settlement recording rejects merchant-unit, currency or declared-processor conflicts and cannot reference more than one causing document. | validation | service, database | test |
05must proveConfirmed | Eligibility is calculated in the workspace’s zone, moving occurrences after a nonmidnight cut-off to the next business day and rolling weekends or holidays forward; the exact cut-off remains eligible that business day. | calculation | service | observed |
06must proveConfirmed | Expected arrival adds the processor’s business-day lead to eligibility, with merchant overrides replacing default lead and cut-off choices. | calculation | service | test |
07must proveConfirmed | The merchant’s bank calendar excludes weekends and listed holidays, defaults to the Federal Reserve calendar and does not move a holiday that falls on Saturday. | calculation | service, database | test |
08must proveConfirmed | Pending electronic checks retain no eligibility or expected date until clearing fills both once; repeated clearing leaves the dates unchanged. | lifecycle | service | test |
09must proveConfirmed | Financial identity and occurrence stay fixed, eligibility dates may be filled once, processor references may be completed once without replacement, and deletion requires workspace purge. | invariant | database | observed |
10Confirmed | Timing-policy changes affect subsequent items without recalculating the dates already assigned to existing items. | policy | service | documented |
11must proveConfirmed | Rhythm supplies shared read-only bank holidays and processor timing defaults, bounding lead and grace values at thirty business days. | policy | database | test |
12must proveConfirmed | Manual entry cannot create payment effects such as captures, refunds or chargebacks; those come from the causing financial workflow. | validation | database | test |
13must proveConfirmed | An eligible effect needs an available lead-time and cut-off rule, and recording refuses source keys reserved for manual reconciliation entry. | validation | service | observed |