Pass B buys. Nothing unbuys. The reverse paths -- refund, chargeback,
cancellation, failed renewal -- are where builds implement the checkout-success
webhook and stop, so access is granted once and never revoked.
Marked *(only where money moves)*, and the instruction with it is to delete the
pass outright from projects that take no money rather than carry it as a
permanently skipped row. That is this file's own rule about passes applied to
itself.
Also marked *(precautionary)*: the evidence is borrowed, not ours. It comes from
auditors of AI-built applications, one of whom names it the single thing they
most often fix, and from a report of a refund defect costing a financial
institution six figures a month. The two markers are deliberately separate --
applicability says whether to keep the pass, provenance says whether to argue
with it.
closes#3
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
92cc7d148f