Save a checkout policy against Accounting's references
What It Does
Staff save a reusable checkout policy after checking its financial context. Most refusals leave the prior policy intact, but an Accounting connection failure permits an unchecked merchant-account reference.
The Flow
When Something Fails
Reject malformed input, blank or repeated tender values and reserved keys with field-specific feedback. No configuration change is retained. Reject unsupported currency without replacing the policy. The previous policy remains saved. Reject unknown or mismatched accounts; log connectivity failure and permit the save without verification. Connectivity failure can leave a saved account reference that was not verified. Roll back on protection, version or default-policy refusal and return the reason. The policy transaction retains no partial changes.
Open Design Questions
The implemented recovery and concurrency behaviour above defines the current boundary. Any change to transaction scope or product authority requires a recorded decision.