Append-only record of checkout attempts whose provider result was never confirmed.
An indeterminate attempt is not a failed one: the application cannot say whether money
was captured, so it must not throw the attempt away or quietly retry it. This table is
the durable, visible form of that uncertainty (MVP-PAY-001-S03).
It deliberately holds no foreign key to orders. An unresolved attempt finalizes no
order and snapshots no items, which is exactly what keeps it out of the kitchen queue
and out of commercial sales: today's figures are reconstructed from commercial
finalizations joined to item snapshots, and an attempt recorded here contributes to
neither (MVP-SALES-001-S07).
The unique application-owned operationId is the retry guard. A repeat of the same
operation cannot insert a second row, so the application has no durable way to convert
one unknown attempt into a second charge, and created_at orders the attempts so an
operator sees the oldest unresolved one first.
Append-only record of checkout attempts whose provider result was never confirmed.
An indeterminate attempt is not a failed one: the application cannot say whether money was captured, so it must not throw the attempt away or quietly retry it. This table is the durable, visible form of that uncertainty (MVP-PAY-001-S03).
It deliberately holds no foreign key to
orders. An unresolved attempt finalizes no order and snapshots no items, which is exactly what keeps it out of the kitchen queue and out of commercial sales: today's figures are reconstructed from commercial finalizations joined to item snapshots, and an attempt recorded here contributes to neither (MVP-SALES-001-S07).The unique application-owned
operationIdis the retry guard. A repeat of the same operation cannot insert a second row, so the application has no durable way to convert one unknown attempt into a second charge, andcreated_atorders the attempts so an operator sees the oldest unresolved one first.