{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-24T15:48:56.209Z",
  "record_id": "VXI-EXT-PROCUREMENT-STRIPE-EXPIRED-CHECKOUT-RECOVERY-NEW-SESSION-IDENTITY-01-v1",
  "record_kind": "external_reference",
  "title": "Stripe Checkout recovery creates a new session",
  "system": "Stripe",
  "evidence_family": "vendor_evidence_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Does recovering an expired Stripe Checkout Session resume the same provider session identity?",
  "near_questions": [
    "Can an expired Stripe Checkout Session still accept payment?",
    "What does recovered_from identify in Stripe Checkout?",
    "Does opening an abandoned-cart recovery URL create a new session?",
    "How should recovered Checkout attempts be linked without duplicate delivery?"
  ],
  "supported_claims": [
    {
      "claim": "An expired Checkout Session cannot be completed. With recovery enabled, opening its recovery URL creates a new copied Checkout Session. The recovered_from field identifies the original expired session. Recovery therefore creates a new attempt that can be correlated with the abandoned one; it does not turn the expired session itself into a completed payment.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "A recovery URL as proof of payment or unique fulfillment",
    "Whether the buyer completed another session or already received delivery requires merchant-side evidence.",
    "Buyer deployment testing, live runtime enforcement, certification or permission to act",
    "Expanded capabilities or licences for existing INDEX executables"
  ],
  "public_summary": "An expired Checkout Session cannot be completed. With recovery enabled, opening its recovery URL creates a new copied Checkout Session. The recovered_from field identifies the original expired session. Recovery therefore creates a new attempt that can be correlated with the abandoned one; it does not turn the expired session itself into a completed payment.",
  "related_record_ids": [],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Expire a Checkout Session",
    "source_url": "https://docs.stripe.com/api/checkout/sessions/expire",
    "checked_on": "2026-10-24",
    "candidate_record_id": "VXI-EXT-PROCUREMENT-STRIPE-EXPIRED-CHECKOUT-RECOVERY-NEW-SESSION-IDENTITY-01-v1",
    "candidate_record_sha256": "724c6618a38125942bfd0a402ec8fe1b6744add52e902616877ebda31bc89ac2",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "An expired Checkout Session cannot be completed. With recovery enabled, opening its recovery URL creates a new copied Checkout Session. The recovered_from field identifies the original expired session. Recovery therefore creates a new attempt that can be correlated with the abandoned one; it does not turn the expired session itself into a completed payment.",
    "required_buyer_context": "Original and recovered session IDs with recovered_from; Recovery expiry and verified current payment status; Order-level deduplication and fulfillment history. Buyer deployment not inspected.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "decision_profile": {
    "schema": "varexis-vendor-evidence-review/1",
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-24",
    "claim_to_check": "Does recovering an expired Stripe Checkout Session resume the same provider session identity?",
    "documented_statement": {
      "status": "documented",
      "statement": "An expired Checkout Session cannot be completed. With recovery enabled, opening its recovery URL creates a new copied Checkout Session. The recovered_from field identifies the original expired session. Recovery therefore creates a new attempt that can be correlated with the abandoned one; it does not turn the expired session itself into a completed payment.",
      "source_ids": [
        "stripe-checkout-expire",
        "stripe-recovery-full",
        "stripe-checkout-object"
      ]
    },
    "review_inference": {
      "status": "review_inference",
      "statement": "Preserve both session identities and reconcile the later payment and delivery against the recovered attempt.",
      "source_ids": [
        "stripe-checkout-expire",
        "stripe-recovery-full",
        "stripe-checkout-object"
      ]
    },
    "buyer_evidence_required": [
      "Original and recovered session IDs with recovered_from",
      "Recovery expiry and verified current payment status",
      "Order-level deduplication and fulfillment history"
    ],
    "review_condition": {
      "status": "varexis_review_policy",
      "statement": "Do not fulfil or retry solely from an expired session or recovery link without the new session outcome."
    },
    "unknowns": "Whether the buyer completed another session or already received delivery requires merchant-side evidence.",
    "unknown_finding": {
      "status": "unknown",
      "statement": "Whether the buyer completed another session or already received delivery requires merchant-side evidence."
    },
    "evidence_sources": [
      {
        "source_id": "stripe-checkout-expire",
        "url": "https://docs.stripe.com/api/checkout/sessions/expire",
        "final_url": "https://docs.stripe.com/api/checkout/sessions/expire",
        "status": "cli_success",
        "captured_at_utc": "2026-10-24T15:10:49.531Z",
        "sha256": "28b038c6c676d7c16cc35d2f2051aa4ede3c903288af1eead956cf3932fb2e1c",
        "bytes": 12933,
        "title": "Expire a Checkout Session",
        "hash_basis": "Exact Stripe CLI documentation response bytes",
        "rights_review": "Factual paraphrase and source metadata only; raw source retained privately and not redistributed.",
        "capture_method": "stripe docs",
        "cli_exit_code": 0,
        "cli_version": "1.55.1",
        "checked_on": "2026-10-24",
        "capture_status": "cli_success",
        "claim_review_completed": true,
        "version_context": "Rolling Stripe documentation captured through Stripe CLI 1.55.1 on 2026-10-24; the merchant must check the applicable API version and configuration.",
        "reviewed_sections": [
          "Open session expiry and inability to complete"
        ]
      },
      {
        "source_id": "stripe-recovery-full",
        "url": "https://docs.stripe.com/payments/checkout/abandoned-carts?ui=full-page",
        "final_url": "https://docs.stripe.com/payments/checkout/abandoned-carts?ui=full-page",
        "status": "cli_success",
        "captured_at_utc": "2026-10-24T15:12:44.731Z",
        "sha256": "9f7cff24610f477754d3ad00b89b62a04fb220f5d7e7e2e1c7f154f5a2162dd4",
        "bytes": 63822,
        "title": "Recover abandoned carts",
        "hash_basis": "Exact Stripe CLI documentation response bytes",
        "rights_review": "Factual paraphrase and source metadata only; raw source retained privately and not redistributed.",
        "capture_method": "stripe docs",
        "cli_exit_code": 0,
        "cli_version": "1.55.1",
        "checked_on": "2026-10-24",
        "capture_status": "cli_success",
        "claim_review_completed": true,
        "version_context": "Rolling Stripe documentation captured through Stripe CLI 1.55.1 on 2026-10-24; the merchant must check the applicable API version and configuration.",
        "reviewed_sections": [
          "Recovery URL lifetime",
          "recovered_from and copied new session"
        ]
      },
      {
        "source_id": "stripe-checkout-object",
        "url": "https://docs.stripe.com/api/checkout/sessions/object",
        "final_url": "https://docs.stripe.com/api/checkout/sessions/object",
        "status": "cli_success",
        "captured_at_utc": "2026-10-24T15:12:46.004Z",
        "sha256": "81bd6a7d8fd16b9ad8d15a0684fcd581e4d6da4fb39445839dd98262ea4aed0b",
        "bytes": 61276,
        "title": "The Checkout Session object",
        "hash_basis": "Exact Stripe CLI documentation response bytes",
        "rights_review": "Factual paraphrase and source metadata only; raw source retained privately and not redistributed.",
        "capture_method": "stripe docs",
        "cli_exit_code": 0,
        "cli_version": "1.55.1",
        "checked_on": "2026-10-24",
        "capture_status": "cli_success",
        "claim_review_completed": true,
        "version_context": "Rolling Stripe documentation captured through Stripe CLI 1.55.1 on 2026-10-24; the merchant must check the applicable API version and configuration.",
        "reviewed_sections": [
          "payment_status",
          "recovered_from"
        ]
      }
    ],
    "observed_deployment": false,
    "commercial_reliance_boundary": "Documentation review only; the buyer must establish applicability and actual outcomes. INDEX does not inspect or control the deployment.",
    "paid_value": {
      "decision_context": "Recover abandoned purchases without losing attempt identity or duplicating delivery.",
      "free": "Complete review, sources, practical questions and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "A saved purchase does not recheck the source or buyer configuration.",
      "specific_watch": "Recheck the documented behavior, product version and buyer evidence before relying on a current outcome."
    },
    "buyer_relevance": "Recover abandoned purchases without losing attempt identity or duplicating delivery.",
    "refusal_conditions": [
      "Do not fulfil or retry solely from an expired session or recovery link without the new session outcome."
    ]
  },
  "niche": {
    "niche_id": "agent-authority-action-evidence",
    "label": "Agent Authority & Action Evidence",
    "classification_id": "payments",
    "classification_label": "Agent Payments, Authority & Transaction Evidence",
    "topic_id": "payments",
    "buyer_intent": "Recover abandoned purchases without losing attempt identity or duplicating delivery.",
    "comparison_role": "supplementary_discovery"
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#stripe-expired-checkout-recovery-new-session-identity",
  "machine_readable_record": "/varexis-index/records/stripe-expired-checkout-recovery-new-session-identity.json"
}
