Entitlements Service Module
What This Service Is For
Entitlements records purchased benefits, exposes controlled consumption and supports accountable staff correction. Rights can be granted, revoked or have a consumed use restored.
Boundary
The module owns grants and use records. Fulfilment dispatches its internal grant handler, eligibility reads a view, and consuming applications call the database consumption function. Frozen purchase details determine what a product grants.
Operations in Words
Readers retrieve grants and consumption subject to holder authority. Staff interventions require permission, explanation and request replay. Consumers draw benefits through the database boundary rather than an HTTP write. No operation is published as a Submissions contract.
Events and Jobs
Purchased-grant changes append local order history, and interventions attempt an audit message after commit. Validity expiry runs within the shared minute schedule.
Consistency Guarantees
Grant uniqueness and consumption references protect repeated requests. Consumption commits with the consumer's work and checks validity directly, so delayed expiry marking does not extend availability. Durable intervention audit delivery remains absent.