01must proveProposed | Saving a checkout policy requires both the business unit receiving the sale and the currency used to price it. origin: COMM-M1 plan A1 (docs/milestones/plans/COMM-M1-plan.md) no proof recorded yet | validation | api, database, console | test |
02must proveProposed | Commerce refuses a policy currency outside the business unit’s supported currencies and preserves the previous record. no proof recorded yet | validation | service, console | test |
03must proveProposed | The default merchant account must be active and match the policy’s unit and currency; an unknown account is refused, but an Accounting connection failure permits saving with a warning. ✓ An active USD account of an identical unit on a USD policy is accepted.✗ An inactive account, or a EUR account on a USD policy, fails validation identifying the field. no proof recorded yet | validation | service | test |
04must proveProposed | Range-based card acceptance requires ordered minimum and maximum amounts, and the range is stored only with that acceptance mode. no proof recorded yet | validation | api, database, console | test |
05must proveProposed | The pay-now window defaults to thirty minutes and accepts values from one minute through one week. origin: COMM-M1 plan A3 (docs/milestones/plans/COMM-M1-plan.md) no proof recorded yet | validation | database, console | test |
06Proposed | Creating a minimally specified policy enables pay now, card and bank debit, store credit, a thirty-minute window, pro forma invoicing and unrestricted card acceptance, with no collection option or card fee. | policy | service, database | test |
07must proveProposed | Commerce identifies and refuses blank payment-method, collection-option and installment-plan entries, and refuses duplicate payment methods. no proof recorded yet | validation | api, service, console | test |
08Proposed | A policy keeps its supplied or name-derived identity permanently and rejects defaults, new and resolve as identities regardless of case. | validation | api, service | test |
09must proveProposed | Once policies exist, one active policy remains the workspace default: creation selects the first, and staff can transfer the designation but cannot clear it. origin: COMM-M1 plan A1 (docs/milestones/plans/COMM-M1-plan.md) no proof recorded yet | invariant | service, database | test |
10must proveProposed | Deactivating or deleting a policy serving as a workspace or application default is refused with the retaining default identified. no proof recorded yet | lifecycle | service, console | test |
11must proveProposed | Store, checkout and order references prevent policy deletion, with a store reference identified in the applicable refusal. no proof recorded yet | lifecycle | service, database | test |
12Proposed | Used By reports Commerce-held store and application-default references and the workspace-default designation, excluding references held by other applications. | policy | service, console | test |
13must proveProposed | Staff replace a complete policy using its read version; Commerce rejects a stale version without overwriting the saved policy. no proof recorded yet | invariant | api, service | test |
14must proveProposed | The order’s retained policy snapshot contains settlement, card, invoicing and fee-product settings independently of subsequent policy edits. no proof recorded yet | invariant | service | test |
15must proveProposed | Policy reads require read permission and each creation, replacement or deletion requires its matching administrator permission; readers cannot change saved records. no proof recorded yet | permission | api, console | test |
16must proveProposed | A full lock prevents replacing a checkout policy, and either full or deletion-only locking prevents removing it. no proof recorded yet | policy | service | observed |