TraceOS — E-Commerce Platform

flow.purchase

order current coverage: partial user_action: external.customer

Why provenance, never truth (INV-028)

intent.a-confirmed-order-is-a-promise
Once an order reads CONFIRMED the customer has been told it will be fulfilled, so nothing downstream may quietly leave it in that state without paying.
docs/decisions/0004-order-confirmation.md#Decision

Outcomes and what checks them (INV-027)

purchase.confirmed → order=confirmed
◐ checked assert.purchase.confirms-order
purchase.rejected → order=rejected
no check declared

Assertions

◐ likely assert.purchase.confirms-order
a validated order reaches CONFIRMED and emits order.created

Parallel branches are drawn as the absence of a next arrow, not as a fork construct (INV-021). Arrows are next; every other relationship is listed under its node.

Effective reality — derived

inventory.outcome◐ likely
order.created reserves stock
assert.inventory.reserves
notification.outcome◐ likely
order.created sends a customer notification, which may fail independently
assert.notification.sends
order.outcome◐ likely
a validated order reaches CONFIRMED and emits order.created
assert.purchase.confirms-order
payment.gateway◐ likely
payment is routed to gateway v2
assert.payment.gateway-v2
payment.outcome◐ likely
processing a payment charges the gateway and reaches PAID
assert.payment.charges-gateway
payment.retry○ uncertain
pending payments are retried on a daily off-peak schedule
assert.retry.scheduled
payment.review◐ likely
a fraud score above 80 routes to a human analyst before payment
assert.payment.human-review

Only current assertions resolve. A context is part of the question: the same model answers differently for different tenants without the graph being forked (INV-008, INV-016).

Impact — four tiers

Changed locator

An unmapped file lands in unknown, never in silence. not mapped does not mean not affected (INV-019).

Coverage — derived

5 flows modeled (4 partial, 1 stub)

10 artifacts mapped

2 repository files map to no node

Unmapped — a change here lands in `unknown`

src/refund/RefundService.ts
src/webhooks/retry.ts

Assertions with no fresh observation

assert.inventory.reserves
assert.retry.scheduled

Counts and named gaps only. No percentage is shown: full artifact mapping does not mean behavior is fully modeled, and a green bar here would be the exact false confidence this model exists to prevent (INV-012).

Validation — 24 finding(s)

code

message

where

warn

OBSERVED_REF_UNREACHABLE

0f0f0f0 is no longer in this history - a squash merge replaces the commits it recorded. Decay cannot narrow to a symbol against it, so 1 assertion(s) fall back to whole-file staleness: assert.inventory.reserves

observations/

warn

OBSERVED_REF_UNREACHABLE

a1b2c3d is no longer in this history - a squash merge replaces the commits it recorded. Decay cannot narrow to a symbol against it, so 6 assertion(s) fall back to whole-file staleness: assert.notification.sends, assert.payment.charges-gateway, assert.payment.gateway-v1, assert.payment.gateway-v2, assert.payment.human-review, assert.purchase.confirms-order

observations/

info

FLOW_WITHOUT_INTENT

flow.inventory: no Intent declares why this Flow exists. Reported, never gated - most behavior predates anyone writing the decision down

flow.inventory

info

FLOW_WITHOUT_INTENT

flow.notification: no Intent declares why this Flow exists. Reported, never gated - most behavior predates anyone writing the decision down

flow.notification

info

FLOW_WITHOUT_INTENT

flow.payment: no Intent declares why this Flow exists. Reported, never gated - most behavior predates anyone writing the decision down

flow.payment

info

FLOW_WITHOUT_INTENT

flow.retry-payment: no Intent declares why this Flow exists. Reported, never gated - most behavior predates anyone writing the decision down

flow.retry-payment

warn

OUTCOME_NOT_VERIFIABLE

flow.inventory: outcome 'inventory.reserved' declares no Assertion that checks whether it occurred (INV-027)

flow.inventory

warn

OUTCOME_NOT_VERIFIABLE

flow.notification: outcome 'notification.sent' declares no Assertion that checks whether it occurred (INV-027)

flow.notification

warn

OUTCOME_NOT_VERIFIABLE

flow.notification: outcome 'notification.failed' declares no Assertion that checks whether it occurred (INV-027)

flow.notification

warn

OUTCOME_NOT_VERIFIABLE

flow.payment: outcome 'payment.success' declares no Assertion that checks whether it occurred (INV-027)

flow.payment

warn

OUTCOME_NOT_VERIFIABLE

flow.payment: outcome 'payment.failed' declares no Assertion that checks whether it occurred (INV-027)

flow.payment

warn

OUTCOME_NOT_VERIFIABLE

flow.purchase: outcome 'purchase.rejected' declares no Assertion that checks whether it occurred (INV-027)

flow.purchase

warn

REFERENCE_NEVER_OBSERVED

assert.payment.gateway-v2: 'src/payment/GatewayResolver.ts#resolve' has no observation (INV-020)

model/flows/payment.md

warn

REFERENCE_NEVER_OBSERVED

assert.payment.gateway-v1: 'src/payment/GatewayResolver.ts#resolve' has no observation (INV-020)

model/flows/payment.md

warn

ASSERTION_WITHOUT_OBSERVATION

assert.retry.scheduled: evidence is referenced but never observed, so confidence stays 'uncertain' (INV-020)

model/flows/retry-payment.md

warn

OBSERVED_REF_UNVERIFIABLE

assert.purchase.confirms-order: ref 'a1b2c3d' is not in this repository, so the observation cannot be checked (spec 6.3)

warn

OBSERVED_REF_UNVERIFIABLE

assert.purchase.confirms-order: ref 'a1b2c3d' is not in this repository, so the observation cannot be checked (spec 6.3)

warn

OBSERVED_REF_UNVERIFIABLE

assert.payment.charges-gateway: ref 'a1b2c3d' is not in this repository, so the observation cannot be checked (spec 6.3)

warn

OBSERVED_REF_UNVERIFIABLE

assert.payment.charges-gateway: ref 'a1b2c3d' is not in this repository, so the observation cannot be checked (spec 6.3)

warn

OBSERVED_REF_UNVERIFIABLE

assert.payment.gateway-v2: ref 'a1b2c3d' is not in this repository, so the observation cannot be checked (spec 6.3)

warn

OBSERVED_REF_UNVERIFIABLE

assert.payment.gateway-v1: ref 'a1b2c3d' is not in this repository, so the observation cannot be checked (spec 6.3)

warn

OBSERVED_REF_UNVERIFIABLE

assert.payment.human-review: ref 'a1b2c3d' is not in this repository, so the observation cannot be checked (spec 6.3)

warn

OBSERVED_REF_UNVERIFIABLE

assert.inventory.reserves: ref '0f0f0f0' is not in this repository, so the observation cannot be checked (spec 6.3)

warn

OBSERVED_REF_UNVERIFIABLE

assert.notification.sends: ref 'a1b2c3d' is not in this repository, so the observation cannot be checked (spec 6.3)