{
  "schema": "varexis-index-delivery/1",
  "catalog_version": "2026-10-18T16:14:30.674Z",
  "route_id": "agentic_pack_transaction_integrity_v1",
  "question": "How can I reconcile declared transaction authority, amendments, retries and payment outcomes offline?",
  "answer": "Reconcile declared spending authority, amended purchase terms, scoped idempotency keys, retries and reported outcomes. Checks customer-supplied versioned declarations only. No live payment execution or approval, runtime interception, provider-settlement verification, fraud certification or guarantee of duplicate-payment prevention. Free synthetic demonstrations show actual execution of this package. Source bindings provide dated context; they do not certify the executable rules.",
  "records": [
    {
      "record_id": "VXI-EXT-PROCUREMENT-SQUARE-PAYMENT-VERSION-TOKEN-AMENDMENT-RACE-01-v1",
      "url": "/varexis-index/records/square-payment-version-token-amendment-race.json",
      "content_sha256": "1be04e179e24e4e8d86729be0f8884c43bacf9914616326375b54217ce510e1f",
      "evidence": {
        "schema": "varexis-public-evidence-record/0.3",
        "generated_at_utc": "2026-10-18T16:14:30.674Z",
        "record_id": "VXI-EXT-PROCUREMENT-SQUARE-PAYMENT-VERSION-TOKEN-AMENDMENT-RACE-01-v1",
        "record_kind": "external_reference",
        "title": "Square: Payment amendments need version reconciliation",
        "system": "Square",
        "evidence_family": "vendor_evidence_review",
        "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
        "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
        "canonical_question": "Does a Square payment update protect an agent from overwriting another concurrent amendment?",
        "near_questions": [
          "How can Square reject a stale payment amendment?",
          "Does a completed payment support UpdatePayment?",
          "Which capability fields govern amount changes?",
          "What ties an approved amendment to a payment version?"
        ],
        "supported_claims": [
          {
            "claim": "Payment updates are last-write-wins by default. The optional version_token enables optimistic concurrency. Only eligible APPROVED payments and permitted fields can be updated; the payment capabilities and capture/cancel deadline constrain available changes.",
            "reliance": "DOCUMENTED_CAPABILITY_ONLY"
          }
        ],
        "not_demonstrated_claims": [
          "Spending approval, settlement verification or prevention of every concurrent payment change",
          "Buyer deployment testing, live runtime enforcement, certification or permission to act",
          "Expanded capabilities or licences for the existing Tool Admission and Audit Coverage executables"
        ],
        "public_summary": "Payment updates are last-write-wins by default. The optional version_token enables optimistic concurrency. Only eligible APPROVED payments and permitted fields can be updated; the payment capabilities and capture/cancel deadline constrain available changes.",
        "related_record_ids": [],
        "source_review": {
          "source_type": "official_external_documentation",
          "source_title": "Update Payment and Tip Amounts",
          "source_url": "https://developer.squareup.com/docs/payments-api/update-payments",
          "checked_on": "2026-10-18",
          "candidate_record_id": "VXI-EXT-PROCUREMENT-SQUARE-PAYMENT-VERSION-TOKEN-AMENDMENT-RACE-01-v1",
          "candidate_record_sha256": "60094c7e5dcd3b27b6f18096165031f505cfddffb80bcd670280c39721fe1305",
          "method": "Primary documentation reviewed for the published bounded statement.",
          "deployment_tested_by_varexis": false,
          "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
        },
        "answer_policy": {
          "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
          "bounded_answer": "Payment updates are last-write-wins by default. The optional version_token enables optimistic concurrency. Only eligible APPROVED payments and permitted fields can be updated; the payment capabilities and capture/cancel deadline constrain available changes.",
          "required_buyer_context": "Approved payment and capability fields. Reviewed version_token and proposed fields. Update result and final payment version. Buyer deployment not inspected.",
          "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
        },
        "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
        "decision_profile": {
          "schema": "varexis-vendor-evidence-review/1",
          "review_status": "documentation_review_only",
          "checked_on": "2026-10-18",
          "claim_to_check": "Does a Square payment update protect an agent from overwriting another concurrent amendment?",
          "documented_statement": {
            "status": "documented",
            "statement": "Payment updates are last-write-wins by default. The optional version_token enables optimistic concurrency. Only eligible APPROVED payments and permitted fields can be updated; the payment capabilities and capture/cancel deadline constrain available changes.",
            "source_ids": [
              "square-update"
            ]
          },
          "buyer_evidence_required": [
            "Approved payment and capability fields.",
            "Reviewed version_token and proposed fields.",
            "Update result and final payment version."
          ],
          "review_condition": {
            "status": "varexis_review_policy",
            "statement": "Do not treat an unversioned update as evidence that no concurrent terms were overwritten."
          },
          "unknowns": "The buyer configuration, contract, effective entitlement and operational evidence have not been inspected. Missing evidence does not establish absence or failure of the feature.",
          "evidence_sources": [
            {
              "source_id": "square-update",
              "url": "https://developer.squareup.com/docs/payments-api/update-payments",
              "final_url": "https://developer.squareup.com/docs/payments-api/update-payments",
              "title": "Update Payment and Tip Amounts",
              "checked_on": "2026-10-18",
              "captured_at_utc": "2026-10-18T16:08:52.048Z",
              "version_context": "Rolling official documentation captured on 2026-10-18; feature and deployment limits apply",
              "sha256": "2844ba24db0ec419187d243125c305fe80ea85049a975ba414ea75fde461da07",
              "bytes": 293165,
              "hash_basis": "Decoded HTTP response body bytes; identifies captured content, not truth or certification",
              "reviewed_sections": [
                "Does a Square payment update protect an agent from overwriting another concurrent amendment?"
              ]
            }
          ],
          "observed_deployment": false,
          "commercial_reliance_boundary": "Procurement evidence support only; no supplier clearance, legal conclusion, configuration audit or verification of the buyer's claim is supplied.",
          "paid_value": {
            "decision_context": "Bind a reviewed amount amendment to the exact payment version.",
            "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
            "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
            "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
            "excluded": [
              "Fresh vendor research",
              "Continuous monitoring or change alerts",
              "Testing the buyer configuration",
              "Private evidence or vendor certification"
            ],
            "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
          },
          "revalidation": {
            "trigger": "A saved purchase does not recheck the source or buyer configuration.",
            "specific_watch": "Approved payment and capability fields. Reviewed version_token and proposed fields. Update result and final payment version."
          },
          "buyer_relevance": "Bind a reviewed amount amendment to the exact payment version.",
          "refusal_conditions": [
            "Do not treat an unversioned update as evidence that no concurrent terms were overwritten."
          ]
        },
        "niche": {
          "niche_id": "agent-authority-action-evidence",
          "label": "Agent Authority & Action Evidence",
          "classification_id": "payments",
          "classification_label": "Agent Payments, Authority & Transaction Evidence",
          "topic_id": "payments",
          "buyer_intent": "Bind a reviewed amount amendment to the exact payment version.",
          "comparison_role": "supplementary_discovery"
        },
        "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
        "service_route": {
          "request_guide": "/varexis-index/request.html",
          "request_workflow": "/varexis-index/request-workflow.json",
          "service_id": "single_request",
          "service_routes_url": "/varexis-index/service-routes.json",
          "payment_required": true,
          "availability_endpoint": "/api/index/capabilities",
          "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
          "checkout_url": "/index-access"
        },
        "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
        "human_page": "/varexis-index/catalog.html#square-payment-version-token-amendment-race",
        "machine_readable_record": "/varexis-index/records/square-payment-version-token-amendment-race.json"
      }
    },
    {
      "record_id": "VXI-EXT-PROCUREMENT-ADYEN-CAPTURE-SUCCESS-LATE-SCHEME-FAILURE-01-v1",
      "url": "/varexis-index/records/adyen-capture-success-late-scheme-failure.json",
      "content_sha256": "38a94538229f6c94bbebcdf9bcfd41bdd5e1c9ad1b22ce43a9ffe707b8b30fbf",
      "evidence": {
        "schema": "varexis-public-evidence-record/0.3",
        "generated_at_utc": "2026-10-18T16:14:30.674Z",
        "record_id": "VXI-EXT-PROCUREMENT-ADYEN-CAPTURE-SUCCESS-LATE-SCHEME-FAILURE-01-v1",
        "record_kind": "external_reference",
        "title": "Adyen: A capture success event can be followed by failure",
        "system": "Adyen",
        "evidence_family": "vendor_evidence_review",
        "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
        "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
        "canonical_question": "Does an Adyen CAPTURE webhook with success true prove final settlement?",
        "near_questions": [
          "Can CAPTURE_FAILED follow a successful Adyen capture event?",
          "Which reference joins an Adyen late capture failure?",
          "Does capture validation establish funds were received?",
          "What remains unresolved after a capture success webhook?"
        ],
        "supported_claims": [
          {
            "claim": "The successful CAPTURE event means the request passed validation and was submitted to the bank or processor. A later scheme rejection can produce CAPTURE_FAILED, including days after submission. Reconciliation needs later outcomes tied to the same capture reference.",
            "reliance": "DOCUMENTED_CAPABILITY_ONLY"
          }
        ],
        "not_demonstrated_claims": [
          "Provider settlement verification, live recovery or a guarantee of payment success",
          "Buyer deployment testing, live runtime enforcement, certification or permission to act",
          "Expanded capabilities or licences for the existing Tool Admission and Audit Coverage executables"
        ],
        "public_summary": "The successful CAPTURE event means the request passed validation and was submitted to the bank or processor. A later scheme rejection can produce CAPTURE_FAILED, including days after submission. Reconciliation needs later outcomes tied to the same capture reference.",
        "related_record_ids": [],
        "source_review": {
          "source_type": "official_external_documentation",
          "source_title": "Capture | Adyen Docs",
          "source_url": "https://docs.adyen.com/online-payments/capture",
          "checked_on": "2026-10-18",
          "candidate_record_id": "VXI-EXT-PROCUREMENT-ADYEN-CAPTURE-SUCCESS-LATE-SCHEME-FAILURE-01-v1",
          "candidate_record_sha256": "3a43753fea520146189c1ee2bde1c743261d981d449162bd44d3eb47d66875f0",
          "method": "Primary documentation reviewed for the published bounded statement.",
          "deployment_tested_by_varexis": false,
          "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
        },
        "answer_policy": {
          "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
          "bounded_answer": "The successful CAPTURE event means the request passed validation and was submitted to the bank or processor. A later scheme rejection can produce CAPTURE_FAILED, including days after submission. Reconciliation needs later outcomes tied to the same capture reference.",
          "required_buyer_context": "Authorization and capture PSP references. Authenticated CAPTURE and subsequent events. Provider-side final outcome evidence. Buyer deployment not inspected.",
          "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
        },
        "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
        "decision_profile": {
          "schema": "varexis-vendor-evidence-review/1",
          "review_status": "documentation_review_only",
          "checked_on": "2026-10-18",
          "claim_to_check": "Does an Adyen CAPTURE webhook with success true prove final settlement?",
          "documented_statement": {
            "status": "documented",
            "statement": "The successful CAPTURE event means the request passed validation and was submitted to the bank or processor. A later scheme rejection can produce CAPTURE_FAILED, including days after submission. Reconciliation needs later outcomes tied to the same capture reference.",
            "source_ids": [
              "adyen-capture"
            ]
          },
          "buyer_evidence_required": [
            "Authorization and capture PSP references.",
            "Authenticated CAPTURE and subsequent events.",
            "Provider-side final outcome evidence."
          ],
          "review_condition": {
            "status": "varexis_review_policy",
            "statement": "Do not classify a submitted capture as independently verified settlement from CAPTURE success alone."
          },
          "unknowns": "The buyer configuration, contract, effective entitlement and operational evidence have not been inspected. Missing evidence does not establish absence or failure of the feature.",
          "evidence_sources": [
            {
              "source_id": "adyen-capture",
              "url": "https://docs.adyen.com/online-payments/capture",
              "final_url": "https://docs.adyen.com/online-payments/capture",
              "title": "Capture | Adyen Docs",
              "checked_on": "2026-10-18",
              "captured_at_utc": "2026-10-18T16:08:51.588Z",
              "version_context": "Rolling official documentation captured on 2026-10-18; feature and deployment limits apply",
              "sha256": "b54e9a74936a350d9762843daabf5b0f8da3396338ab6c8c98384d2b2b12afdb",
              "bytes": 377264,
              "hash_basis": "Decoded HTTP response body bytes; identifies captured content, not truth or certification",
              "reviewed_sections": [
                "Does an Adyen CAPTURE webhook with success true prove final settlement?"
              ]
            }
          ],
          "observed_deployment": false,
          "commercial_reliance_boundary": "Procurement evidence support only; no supplier clearance, legal conclusion, configuration audit or verification of the buyer's claim is supplied.",
          "paid_value": {
            "decision_context": "Prevent premature closure of an agent payment reconciliation.",
            "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
            "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
            "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
            "excluded": [
              "Fresh vendor research",
              "Continuous monitoring or change alerts",
              "Testing the buyer configuration",
              "Private evidence or vendor certification"
            ],
            "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
          },
          "revalidation": {
            "trigger": "A saved purchase does not recheck the source or buyer configuration.",
            "specific_watch": "Authorization and capture PSP references. Authenticated CAPTURE and subsequent events. Provider-side final outcome evidence."
          },
          "buyer_relevance": "Prevent premature closure of an agent payment reconciliation.",
          "refusal_conditions": [
            "Do not classify a submitted capture as independently verified settlement from CAPTURE success alone."
          ]
        },
        "niche": {
          "niche_id": "agent-authority-action-evidence",
          "label": "Agent Authority & Action Evidence",
          "classification_id": "payments",
          "classification_label": "Agent Payments, Authority & Transaction Evidence",
          "topic_id": "payments",
          "buyer_intent": "Prevent premature closure of an agent payment reconciliation.",
          "comparison_role": "supplementary_discovery"
        },
        "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
        "service_route": {
          "request_guide": "/varexis-index/request.html",
          "request_workflow": "/varexis-index/request-workflow.json",
          "service_id": "single_request",
          "service_routes_url": "/varexis-index/service-routes.json",
          "payment_required": true,
          "availability_endpoint": "/api/index/capabilities",
          "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
          "checkout_url": "/index-access"
        },
        "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
        "human_page": "/varexis-index/catalog.html#adyen-capture-success-late-scheme-failure",
        "machine_readable_record": "/varexis-index/records/adyen-capture-success-late-scheme-failure.json"
      }
    },
    {
      "record_id": "VXI-EXT-PROCUREMENT-PAYPAL-ORDER-AMENDMENT-AFTER-PAYER-APPROVAL-01-v1",
      "url": "/varexis-index/records/paypal-order-amendment-after-payer-approval.json",
      "content_sha256": "826dc161152ebab51d37936f413d708a6502d3cab305b9ad53f43cbba54f4a30",
      "evidence": {
        "schema": "varexis-public-evidence-record/0.3",
        "generated_at_utc": "2026-10-18T16:14:30.674Z",
        "record_id": "VXI-EXT-PROCUREMENT-PAYPAL-ORDER-AMENDMENT-AFTER-PAYER-APPROVAL-01-v1",
        "record_kind": "external_reference",
        "title": "PayPal: Approved order terms can still change",
        "system": "PayPal",
        "evidence_family": "vendor_evidence_review",
        "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
        "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
        "canonical_question": "Does payer approval of a PayPal order prove the final captured amount and shipping terms are unchanged?",
        "near_questions": [
          "Can PayPal order amounts change after payer approval?",
          "Why does modified checkout use Continue instead of Pay Now?",
          "What should an agent compare before final order capture?",
          "Does an approved order freeze shipping and tax fields?"
        ],
        "supported_claims": [
          {
            "claim": "PayPal documents updating order amounts and shipping details before capture, including changes after payer approval. Its checkout guidance uses Continue with commit=false when final amounts may change. An agent must compare the approved intent with the final order rather than assuming approval freezes every term.",
            "reliance": "DOCUMENTED_CAPABILITY_ONLY"
          }
        ],
        "not_demonstrated_claims": [
          "Owner approval of amendments, payment execution or final settlement verification",
          "Buyer deployment testing, live runtime enforcement, certification or permission to act",
          "Expanded capabilities or licences for the existing Tool Admission and Audit Coverage executables"
        ],
        "public_summary": "PayPal documents updating order amounts and shipping details before capture, including changes after payer approval. Its checkout guidance uses Continue with commit=false when final amounts may change. An agent must compare the approved intent with the final order rather than assuming approval freezes every term.",
        "related_record_ids": [],
        "source_review": {
          "source_type": "official_external_documentation",
          "source_title": "Update order details | PayPal Developer",
          "source_url": "https://developer.paypal.com/docs/checkout/standard/customize/update-order-details/",
          "checked_on": "2026-10-18",
          "candidate_record_id": "VXI-EXT-PROCUREMENT-PAYPAL-ORDER-AMENDMENT-AFTER-PAYER-APPROVAL-01-v1",
          "candidate_record_sha256": "2d23f3e39da5a1e5e3aa1f6a2b82470b0c1b421153ddaef4f0c05953cf76eff6",
          "method": "Primary documentation reviewed for the published bounded statement.",
          "deployment_tested_by_varexis": false,
          "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
        },
        "answer_policy": {
          "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
          "bounded_answer": "PayPal documents updating order amounts and shipping details before capture, including changes after payer approval. Its checkout guidance uses Continue with commit=false when final amounts may change. An agent must compare the approved intent with the final order rather than assuming approval freezes every term.",
          "required_buyer_context": "Approved intent and original order. PATCH changes and final order details. Owner-authorized amount, recipient and conditions. Buyer deployment not inspected.",
          "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
        },
        "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
        "decision_profile": {
          "schema": "varexis-vendor-evidence-review/1",
          "review_status": "documentation_review_only",
          "checked_on": "2026-10-18",
          "claim_to_check": "Does payer approval of a PayPal order prove the final captured amount and shipping terms are unchanged?",
          "documented_statement": {
            "status": "documented",
            "statement": "PayPal documents updating order amounts and shipping details before capture, including changes after payer approval. Its checkout guidance uses Continue with commit=false when final amounts may change. An agent must compare the approved intent with the final order rather than assuming approval freezes every term.",
            "source_ids": [
              "paypal-patch"
            ]
          },
          "buyer_evidence_required": [
            "Approved intent and original order.",
            "PATCH changes and final order details.",
            "Owner-authorized amount, recipient and conditions."
          ],
          "review_condition": {
            "status": "varexis_review_policy",
            "statement": "Do not rely on the original approval when changed final terms have not been reconciled with delegated authority."
          },
          "unknowns": "The buyer configuration, contract, effective entitlement and operational evidence have not been inspected. Missing evidence does not establish absence or failure of the feature.",
          "evidence_sources": [
            {
              "source_id": "paypal-patch",
              "url": "https://developer.paypal.com/docs/checkout/standard/customize/update-order-details/",
              "final_url": "https://developer.paypal.com/v5/checkout/show-order-updates",
              "title": "Update order details | PayPal Developer",
              "checked_on": "2026-10-18",
              "captured_at_utc": "2026-10-18T16:09:56.623Z",
              "version_context": "Official rolling documentation captured on 2026-10-18",
              "sha256": "edeb535b90673fb7ca72989a08c09e4271da2c4877217c957dde0b6d250a3644",
              "bytes": 206748,
              "hash_basis": "Decoded HTTP response body bytes; capture identity only, not independent truth.",
              "reviewed_sections": [
                "Does payer approval of a PayPal order prove the final captured amount and shipping terms are unchanged?"
              ]
            }
          ],
          "observed_deployment": false,
          "commercial_reliance_boundary": "Procurement evidence support only; no supplier clearance, legal conclusion, configuration audit or verification of the buyer's claim is supplied.",
          "paid_value": {
            "decision_context": "Detect a mismatch between delegated purchase terms and the final capture request.",
            "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
            "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
            "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
            "excluded": [
              "Fresh vendor research",
              "Continuous monitoring or change alerts",
              "Testing the buyer configuration",
              "Private evidence or vendor certification"
            ],
            "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
          },
          "revalidation": {
            "trigger": "A saved purchase does not recheck the source or buyer configuration.",
            "specific_watch": "Approved intent and original order. PATCH changes and final order details. Owner-authorized amount, recipient and conditions."
          },
          "buyer_relevance": "Detect a mismatch between delegated purchase terms and the final capture request.",
          "refusal_conditions": [
            "Do not rely on the original approval when changed final terms have not been reconciled with delegated authority."
          ]
        },
        "niche": {
          "niche_id": "agent-authority-action-evidence",
          "label": "Agent Authority & Action Evidence",
          "classification_id": "payments",
          "classification_label": "Agent Payments, Authority & Transaction Evidence",
          "topic_id": "payments",
          "buyer_intent": "Detect a mismatch between delegated purchase terms and the final capture request.",
          "comparison_role": "supplementary_discovery"
        },
        "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
        "service_route": {
          "request_guide": "/varexis-index/request.html",
          "request_workflow": "/varexis-index/request-workflow.json",
          "service_id": "single_request",
          "service_routes_url": "/varexis-index/service-routes.json",
          "payment_required": true,
          "availability_endpoint": "/api/index/capabilities",
          "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
          "checkout_url": "/index-access"
        },
        "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
        "human_page": "/varexis-index/catalog.html#paypal-order-amendment-after-payer-approval",
        "machine_readable_record": "/varexis-index/records/paypal-order-amendment-after-payer-approval.json"
      }
    }
  ],
  "basis": "VAREXIS-authored offline reconciliation rules, synthetic fixtures and bound public documentation reviews. No fresh source review, customer deployment test, artifact authentication or real-world event verification is performed.",
  "boundary": "One-time GBP 149 plus applicable VAT for the versioned offline executable and one-buyer internal-use licence. Independent entitlement required; not included in GBP 5/19 offers or any existing subscription. No updates, monitoring, redistribution, hosted resale or support SLA. No live payment execution or approval, runtime interception, provider-settlement verification, fraud certification or guarantee of duplicate-payment prevention.",
  "pack": {
    "schema": "varexis-index-evidence-pack/1",
    "pack_id": "agent-transaction-integrity",
    "version": "1.0.0",
    "title": "Agent Transaction Integrity & Replay Analyzer",
    "prepared_at_utc": "2026-10-18T16:45:18.000Z",
    "review_status": "documentation_review_only",
    "source_checked_on": [
      "2026-10-18"
    ],
    "source_capture_date": null,
    "source_capture_boundary": "Each source record retains its own capture date, version and hash. Executable rules are VAREXIS-authored; source documentation is context, not vendor validation.",
    "summary_markdown": "Reconcile declared spending authority, amended purchase terms, scoped idempotency keys, retries and reported outcomes. Checks customer-supplied versioned declarations only. No live payment execution or approval, runtime interception, provider-settlement verification, fraud certification or guarantee of duplicate-payment prevention. Free synthetic demonstrations show actual execution of this package. Source bindings provide dated context; they do not certify the executable rules.\n\nOne-time GBP 149 plus applicable VAT for the versioned offline executable and one-buyer internal-use licence. Independent entitlement required; not included in GBP 5/19 offers or any existing subscription. No updates, monitoring, redistribution, hosted resale or support SLA. No live payment execution or approval, runtime interception, provider-settlement verification, fraud certification or guarantee of duplicate-payment prevention.",
    "comparison": [
      {
        "record_id": "VXI-EXT-PROCUREMENT-SQUARE-PAYMENT-VERSION-TOKEN-AMENDMENT-RACE-01-v1",
        "subject": "Square",
        "review_status": "documentation_review_only",
        "checked_on": "2026-10-18",
        "claim_to_check": "Does a Square payment update protect an agent from overwriting another concurrent amendment?",
        "documented_statement": {
          "status": "documented",
          "statement": "Payment updates are last-write-wins by default. The optional version_token enables optimistic concurrency. Only eligible APPROVED payments and permitted fields can be updated; the payment capabilities and capture/cancel deadline constrain available changes.",
          "source_ids": [
            "square-update"
          ]
        },
        "buyer_evidence_required": [
          "Approved payment and capability fields.",
          "Reviewed version_token and proposed fields.",
          "Update result and final payment version."
        ],
        "review_condition": {
          "status": "varexis_review_policy",
          "statement": "Do not treat an unversioned update as evidence that no concurrent terms were overwritten."
        },
        "unknowns": "The buyer configuration, contract, effective entitlement and operational evidence have not been inspected. Missing evidence does not establish absence or failure of the feature."
      },
      {
        "record_id": "VXI-EXT-PROCUREMENT-ADYEN-CAPTURE-SUCCESS-LATE-SCHEME-FAILURE-01-v1",
        "subject": "Adyen",
        "review_status": "documentation_review_only",
        "checked_on": "2026-10-18",
        "claim_to_check": "Does an Adyen CAPTURE webhook with success true prove final settlement?",
        "documented_statement": {
          "status": "documented",
          "statement": "The successful CAPTURE event means the request passed validation and was submitted to the bank or processor. A later scheme rejection can produce CAPTURE_FAILED, including days after submission. Reconciliation needs later outcomes tied to the same capture reference.",
          "source_ids": [
            "adyen-capture"
          ]
        },
        "buyer_evidence_required": [
          "Authorization and capture PSP references.",
          "Authenticated CAPTURE and subsequent events.",
          "Provider-side final outcome evidence."
        ],
        "review_condition": {
          "status": "varexis_review_policy",
          "statement": "Do not classify a submitted capture as independently verified settlement from CAPTURE success alone."
        },
        "unknowns": "The buyer configuration, contract, effective entitlement and operational evidence have not been inspected. Missing evidence does not establish absence or failure of the feature."
      },
      {
        "record_id": "VXI-EXT-PROCUREMENT-PAYPAL-ORDER-AMENDMENT-AFTER-PAYER-APPROVAL-01-v1",
        "subject": "PayPal",
        "review_status": "documentation_review_only",
        "checked_on": "2026-10-18",
        "claim_to_check": "Does payer approval of a PayPal order prove the final captured amount and shipping terms are unchanged?",
        "documented_statement": {
          "status": "documented",
          "statement": "PayPal documents updating order amounts and shipping details before capture, including changes after payer approval. Its checkout guidance uses Continue with commit=false when final amounts may change. An agent must compare the approved intent with the final order rather than assuming approval freezes every term.",
          "source_ids": [
            "paypal-patch"
          ]
        },
        "buyer_evidence_required": [
          "Approved intent and original order.",
          "PATCH changes and final order details.",
          "Owner-authorized amount, recipient and conditions."
        ],
        "review_condition": {
          "status": "varexis_review_policy",
          "statement": "Do not rely on the original approval when changed final terms have not been reconciled with delegated authority."
        },
        "unknowns": "The buyer configuration, contract, effective entitlement and operational evidence have not been inspected. Missing evidence does not establish absence or failure of the feature."
      }
    ],
    "members": [
      {
        "schema": "varexis-index-delivery/1",
        "catalog_version": "2026-10-18T16:14:30.674Z",
        "route_id": "agentic_reviewed_square_payment_version_token_amendment_race",
        "question": "Does a Square payment update protect an agent from overwriting another concurrent amendment?",
        "answer": "Payment updates are last-write-wins by default. The optional version_token enables optimistic concurrency. Only eligible APPROVED payments and permitted fields can be updated; the payment capabilities and capture/cancel deadline constrain available changes.",
        "basis": "A saved snapshot of the reviewed public route and source records. No fresh source review, independent experiment, deployment assessment or bespoke claim analysis is performed by this delivery.",
        "boundary": "Public answers remain free. Payment provides automatic retrieval, version binding and a saved delivery. It does not upgrade evidence or disclose protected material.",
        "snapshot_sha256": "f57ac86daccd01fda9243f8103c2e328b176d0e9c653bfd0d38afab98e3a7550",
        "record_ids": [
          "VXI-EXT-PROCUREMENT-SQUARE-PAYMENT-VERSION-TOKEN-AMENDMENT-RACE-01-v1"
        ]
      },
      {
        "schema": "varexis-index-delivery/1",
        "catalog_version": "2026-10-18T16:14:30.674Z",
        "route_id": "agentic_reviewed_adyen_capture_success_late_scheme_failure",
        "question": "Does an Adyen CAPTURE webhook with success true prove final settlement?",
        "answer": "The successful CAPTURE event means the request passed validation and was submitted to the bank or processor. A later scheme rejection can produce CAPTURE_FAILED, including days after submission. Reconciliation needs later outcomes tied to the same capture reference.",
        "basis": "A saved snapshot of the reviewed public route and source records. No fresh source review, independent experiment, deployment assessment or bespoke claim analysis is performed by this delivery.",
        "boundary": "Public answers remain free. Payment provides automatic retrieval, version binding and a saved delivery. It does not upgrade evidence or disclose protected material.",
        "snapshot_sha256": "60fa9d557475bb439aa9380bc394119a0e7ed9ae31322002f414e4ae79858497",
        "record_ids": [
          "VXI-EXT-PROCUREMENT-ADYEN-CAPTURE-SUCCESS-LATE-SCHEME-FAILURE-01-v1"
        ]
      },
      {
        "schema": "varexis-index-delivery/1",
        "catalog_version": "2026-10-18T16:14:30.674Z",
        "route_id": "agentic_reviewed_paypal_order_amendment_after_payer_approval",
        "question": "Does payer approval of a PayPal order prove the final captured amount and shipping terms are unchanged?",
        "answer": "PayPal documents updating order amounts and shipping details before capture, including changes after payer approval. Its checkout guidance uses Continue with commit=false when final amounts may change. An agent must compare the approved intent with the final order rather than assuming approval freezes every term.",
        "basis": "A saved snapshot of the reviewed public route and source records. No fresh source review, independent experiment, deployment assessment or bespoke claim analysis is performed by this delivery.",
        "boundary": "Public answers remain free. Payment provides automatic retrieval, version binding and a saved delivery. It does not upgrade evidence or disclose protected material.",
        "snapshot_sha256": "4f54d1f1f8fc670ddf9d3d2e58a0e0ed265414d0ad36d2293c58b6a1407482b2",
        "record_ids": [
          "VXI-EXT-PROCUREMENT-PAYPAL-ORDER-AMENDMENT-AFTER-PAYER-APPROVAL-01-v1"
        ]
      }
    ],
    "rights_review": {
      "reviewed_on": "2026-10-18",
      "scope": "Original VAREXIS rules and synthetic examples with existing attributed public review summaries.",
      "included": "Original executable, schemas and synthetic fixtures; public review records with original hashes.",
      "excluded": "Upstream document bodies/code, credentials, personal data and protected research.",
      "redistribution_boundary": "Source URLs identify context and do not grant redistribution rights. The executable is separately licensed for internal use.",
      "terms_url": "https://varexis.tech/checkout-terms",
      "independent_testing": false
    },
    "delivery_unit": {
      "kind": "one_licensed_product",
      "member_count": 3,
      "developer_query_units": 0,
      "research_query_units": 0,
      "extra_member_purchases": false,
      "automatic_refresh": false,
      "service_id": "transaction_integrity",
      "existing_subscriptions_eligible": false
    }
  },
  "paid_artifact": {
    "schema": "varexis-paid-artifact/1",
    "filename": "varexis-agent-transaction-integrity-v1.zip",
    "media_type": "application/zip",
    "encoding": "base64",
    "archive_sha256": "c40c2357f9c16f21cd0a5efb46196dc7c5712061f28bba9abf34d665075418b3",
    "manifest_sha256": "12dcdeb8b228fabc16fd2861c8438e0656529526d329a9d57419543b2362a2ed",
    "bytes": 24255,
    "runtime": "Node.js 24",
    "licence": "VAREXIS Agent Transaction Integrity & Replay Analyzer v1.0.0\nOne-time licence for one purchasing individual or one legal entity, including its staff and agents acting internally on its behalf. Reusable local execution and internal CI use; no per-run fee. No sublicensing, redistribution of executable/rules, hosted customer service, API resale or external agent distribution. Each other executable requires its own licence. Existing subscriptions and GBP 5/19 offers do not include this product. Public evidence retains its existing terms. No updates, monitoring, deployment assurance, certification or support SLA is included. Billing and delivery support follows https://varexis.tech/checkout-terms. Statutory rights are unaffected.\nLicence rights begin after provider-verified payment for this product. Retain the original purchase key for authenticated delivery and recovery.\n",
    "extract_and_run": "Verify ZIP SHA-256 against authenticated delivery. Extract, then run evaluate.mjs with this externally supplied manifest_sha256 and a schema-valid JSON declaration. No uploads or network calls."
  },
  "snapshot_sha256": "3ee07fb55ff3126e127e8f7798b92629044695abb20ed92e4239d1f786c99d82",
  "preview_kind": "paid_executable_manifest",
  "preview_payload_sha256": "a31ddddba00e8ba420250f1f07dc71ce2b8844e272b311479a649f06fe72faae"
}
