Checkout and Payment
Purpose
Describe the discovered checkout boundary while clearly marking financial completion as Blocked.
Eligible Users and Roles
Authenticated customers using an authorized sandbox fixture.
Prerequisites
An isolated customer/cart/address fixture and repository-provided sandbox or mock payment configuration. Real payment credentials are prohibited.
How to Open This Feature
Open /checkout from an eligible cart. Direct access behavior depends on authentication and cart safety checks.
Step-by-Step Instructions
Step 1: Review the Cart and Address
Confirm the selected synthetic address and cart contents are current.
Step 2: Review Server-Authoritative Terms
Verify price, stock, promotions, shipping, and payment availability through the server. This audit did not complete the full provider matrix.
Step 3: Submit Once in a Sandbox
Only an authorized future fixture may perform this step. Wait for a reliable final state and reuse the intended idempotency contract after an ambiguous timeout.
Step 4: Confirm the Order
Reload order history before retrying an uncertain submission. This completion flow is Blocked in the current evidence.
Possible States
Ready
Checkout surface discovered; full ready-state fixture Not Tested.
Authentication, Stock, Price, Address, or Coupon Conflict
Required error branches are Not Tested comprehensively.
Payment Pending, Failed, Succeeded, or Ambiguous
No state is claimed as operated with a real provider. Use sandbox-only evidence in future runs.
Input Rules and Limits
The server is authoritative for totals, stock, promotion use, address, payment state, idempotency, and retries. Exact provider limits are not documented without verified sandbox configuration.
Common Problems and Recovery
- Do not double-click submit.
- After timeout or lost response, query authoritative order/payment state before retry.
- Preserve cart and selected evidence until the outcome is known.
Important Warnings
Real payment, SMS, email, storage, or provider calls are prohibited in this audit. Financial flow coverage is Blocked, not Passed.
What Happens Next
A verified sandbox success would create one durable order and one correct payment outcome. That result is not claimed here.