Use when designing or reviewing payment links, checkout sessions, gateway callbacks, payment webhooks, order completion, refunds or downstream fulfillment where money/state transitions must remain server-authoritative and replay-safe.
