[ roadmap · review team ]
Later: reviewers that cite your decisions.
Planned after the hosted workspace. Five reviewers, each scoped to one role, read the same live decisions the harness serves. Every comment cites a decision id and its source. When a reviewer has no live decision to cite, it stays silent. None of this is available yet.
Scope and customer commitments
This change lets agents issue refunds above the manual approval limit.
Flows, states and interaction rules
The refund modal has no pending state while the processor call runs.
Service boundaries and data ownership
This handler inserts into ledger_entries directly instead of calling LedgerService.
Access, data handling and audit trail
The new webhook route parses the body before verifying the signature.
Regression risk and release criteria
No test covers a retried refund with the same refund_id.