What must be proven
This room describes concrete readiness proof and stop signals before live payments.
- • owner_user_id
- • archive consent
- • RLS
- • private route
checkout delivery
Account archive
Purchase must appear in owner account and never in someone else’s account.
Verify the full path from product to delivered result, not one pretty page.
Operator check
The check passes only when webhook, unlock, delivery, archive, support, and deletion dry run line up.
- • Do not trust Stripe redirect alone.
- • Do not send the full answer in email preview.
- • Do not store public share as private artifact.
- • Do not start ads before test order signoff.
related