01must proveProposed | Commerce fulfils a grant obligation from the specification frozen in the purchased details, independently of later product configuration. no proof recorded yet | lifecycle | service | test |
02must proveProposed | An order line grants its specified quantity once per entitlement kind, so buying three copies with a two-download grant still provides two uses. no proof recorded yet | calculation | service | test |
03must proveProposed | The specification assigns the holder to the item recipient with buyer fallback, or explicitly to the buyer. no proof recorded yet | calculation | service | test |
04must proveProposed | A grant obligation with a missing or unreadable specification fails permanently and raises an operational exception. no proof recorded yet | validation | service | test |
05must proveProposed | Consumption counts once per request reference, refuses exhausted quantities and prevents use of inactive or expired rights. no proof recorded yet | invariant | service, database | test |
06must proveProposed | An authorized restoration records its reason and audit history, replays under the original request key and refuses a second restoration under a new key. no proof recorded yet | lifecycle | api, service | test |
07must proveProposed | Staff can issue manual grants or revoke active rights with recorded reasons and sensitive audit controls, preserving consumed quantities and rejecting repeat revocation or an invalid validity window. no proof recorded yet | permission | api, service | test |
08must proveProposed | Cancellation ends every active grant on the line without erasing past consumption, and retrying that revocation makes no further change. no proof recorded yet | lifecycle | service | test |
09must proveProposed | Expiry sweeps mark rights expired after their validity window, while consumption independently checks that window before drawing. no proof recorded yet | lifecycle | service, database | test |
10must proveProposed | Staff readers can inspect any holder’s or order’s rights, but portal readers are limited to their linked contact and cannot restore, manually grant or revoke them. no proof recorded yet | permission | api, service | test |
11Proposed | Rights use download, registration inclusion, submission requirement or access kinds and can belong to a contact or organization, originating in fulfilment or a manual grant. | invariant | database | observed |
12must proveProposed | The read-only eligibility view exposes active rights and stops exposing a revoked right immediately. no proof recorded yet | policy | database | test |
13Proposed | Grant setup has no console screen, although Order 360 can display grants associated with its purchases. | policy | console | documented |