01must proveProposed | Carrier handoff atomically advances a manifested shipment's whole line quantities, ships allocations, reduces on-hand through shipment movements, completes unit obligations, invokes cost relief and updates order shipping quantities and summary. no proof recorded yet | invariant | service, database | test |
02must proveProposed | Handoff rejects units without register authorization, moves no stock and records a refusal finding and shipment-history entry. no proof recorded yet | validation | service | test |
03must proveProposed | Only manifested shipments accept carrier handoff, and repeated handoff is rejected and recorded. no proof recorded yet | validation | service | test |
04must proveProposed | Cancellation fences the shipment line's entire unit range, causing handoff to reject the shipment without movement and require parcel removal. no proof recorded yet | invariant | service, database | test |
05must proveProposed | Shipment-line locking determines whether cancellation or handoff wins a race, and goods already handed over require a return. no proof recorded yet | invariant | service, database | test |
06must proveProposed | Committed cancellation cancels fenced lines, removes shipment stamps while retaining picked order allocations, voids labels on parcels carrying no retained lines and pulls those parcels so retained units can use a new shipment. no proof recorded yet | lifecycle | service | test |
07must proveProposed | Counter handover of a packed pickup records the collector and applies the same stock, obligation, cost-relief and order-quantity changes as carrier handoff. origin: Decision L, Andrew 2026-10-18 ("add it now"): services-commerce:docs/migrations/shipping/README.md#D-P8S-14 no proof recorded yet | lifecycle | service | test |
08must proveProposed | Counter handover rejects missing collector identity, carrier shipments, shipments no longer packed and cancellation-fenced lines. origin: Decision L, Andrew 2026-10-18 ("add it now"): services-commerce:docs/migrations/shipping/README.md#D-P8S-14 no proof recorded yet | validation | api, service | test |
09must proveProposed | Carrier handoff requires its handoff permission, while counter handover requires sensitive administrator authority. origin: Decision L, Andrew 2026-10-18 ("add it now"): services-commerce:docs/migrations/shipping/README.md#D-P8S-14 no proof recorded yet | permission | api | observed |
10Proposed | Handoff invokes the selected cost-relief provider within its transaction; the fixture permits deferred relief and the running layers provider determines actual cost relief. origin: Decision O, Andrew 2026-10-18 (as built, not contested): services-commerce:docs/migrations/shipping/README.md#Section 9 walkthrough | policy | service | observed |