Define central-purchase workflow and fulfillment #15

Closed
opened 2026-10-22 09:09:34 +00:00 by phg · 5 comments
Owner

Part of #1

Question

How should prevouch support an Orga-team buying tickets on behalf of participants, alongside the existing self-purchase mode?

The central-purchase option is required. Participants never receive the vouchers in this mode: the Orga-team uses them to buy tickets for participants. Participants pay upfront to the designated bank account, and unused funds must be returnable when tickets cannot be bought. Whether the application merely tracks those bank operations or initiates them remains a decision, not an existing authorization to move money.

Decide whether purchase mode is configured per event or per request, whether an event can mix modes, and whether or when a request can switch modes. Define the participant, purchaser, and companion relationships and which names or seller-required information the Orga-team needs.

Work through reserving a voucher for a funded request, exposing it only to the Orga-team, claiming a purchase so two organizers cannot buy the same request, recording the seller order, and delivering or making the bought ticket available to the participant. Decide which parts are human actions and which are application assistance; do not assume automated checkout.

Settle what fulfills a centrally purchased request and which evidence supports it. Voucher email delivery to a participant fulfills the previously discussed self-purchase mode only; it cannot fulfill central purchase. Keep upfront payment, seller order/payment, voucher use, ticket delivery, and successor arrival as distinct facts. Decide the return-address instructions and responsibilities for an organizer purchasing through the external seller.

Cover multiple organizers, +n purchases, partial group success, failed purchases, and a voucher becoming unusable between reservation and checkout. Define the purchase outcomes Define upfront-payment tracking and refunds for central purchases needs, without deciding reconciliation and refund rules here. The composite request state model remains in Define ticket-request allocation and fulfillment, and detailed failure/recovery procedures remain in their existing decision.

Resolution: an agreed central-purchase workflow, fulfillment evidence, and worked examples. No real purchase or bank operation is part of resolving this planning ticket.

Part of #1 ## Question How should prevouch support an Orga-team buying tickets on behalf of participants, alongside the existing self-purchase mode? The central-purchase option is required. Participants never receive the vouchers in this mode: the Orga-team uses them to buy tickets for participants. Participants pay upfront to the designated bank account, and unused funds must be returnable when tickets cannot be bought. Whether the application merely tracks those bank operations or initiates them remains a decision, not an existing authorization to move money. Decide whether purchase mode is configured per event or per request, whether an event can mix modes, and whether or when a request can switch modes. Define the participant, purchaser, and companion relationships and which names or seller-required information the Orga-team needs. Work through reserving a voucher for a funded request, exposing it only to the Orga-team, claiming a purchase so two organizers cannot buy the same request, recording the seller order, and delivering or making the bought ticket available to the participant. Decide which parts are human actions and which are application assistance; do not assume automated checkout. Settle what fulfills a centrally purchased request and which evidence supports it. Voucher email delivery to a participant fulfills the previously discussed self-purchase mode only; it cannot fulfill central purchase. Keep upfront payment, seller order/payment, voucher use, ticket delivery, and successor arrival as distinct facts. Decide the return-address instructions and responsibilities for an organizer purchasing through the external seller. Cover multiple organizers, +n purchases, partial group success, failed purchases, and a voucher becoming unusable between reservation and checkout. Define the purchase outcomes [Define upfront-payment tracking and refunds for central purchases](https://git.s1q.dev/MISChaufen/prevouch/issues/16) needs, without deciding reconciliation and refund rules here. The composite request state model remains in [Define ticket-request allocation and fulfillment](https://git.s1q.dev/MISChaufen/prevouch/issues/5), and detailed failure/recovery procedures remain in their existing decision. Resolution: an agreed central-purchase workflow, fulfillment evidence, and worked examples. No real purchase or bank operation is part of resolving this planning ticket.
phg self-assigned this 2026-10-22 10:02:11 +00:00
Author
Owner

Planning checkpoint — central-purchase questions Q26–Q29

The human agreed to all four recommendations. This records inputs to the open central-purchase decision, not a final resolution.

  • Purchase-mode scope: each event has one purchase mode, self-purchase or central purchase. Different events may choose different modes; an event does not mix them. When the mode may change remains to be settled.
  • Organizer purchasing: organizers perform checkout themselves on the external seller's website. prevouch assigns vouchers, coordinates exclusive purchase claims, and records outcomes. This chooses assisted manual purchasing rather than automated external checkout; claim and handover details remain open.
  • Central fulfillment: a request is fulfilled once seller payment is confirmed and the purchased ticket is available to the requester. Keep "Purchased, awaiting ticket delivery" distinct. Upfront bank receipt, seller payment, ticket availability, and successor arrival are separate facts; successor arrival is not fulfillment evidence.
  • Companions: the requester manages their own and +n companion requests and supplies any seller-required information for each ticket. Separate companion accounts are optional, not required.

The prior allocation contract remains in force: organizer-controlled start, automatic assignments afterward in the established order, no voucher codes for central-purchase members, and the permanent allocation-policy lock at the first successful voucher send or central ticket purchase. Funding eligibility and financial consequences remain in Define upfront-payment tracking and refunds for central purchases.

Still to settle here: purchase-mode changes, organizer claims and checkout handovers, required participant information, purchase evidence, how tickets become available, partial purchases, and the outcomes consumed by funding and recovery decisions. The glossary now records the agreed requester, companion, event-wide purchase mode, and central fulfillment terms.

## Planning checkpoint — central-purchase questions Q26–Q29 The human agreed to all four recommendations. This records inputs to the open central-purchase decision, not a final resolution. - **Purchase-mode scope:** each event has one purchase mode, self-purchase or central purchase. Different events may choose different modes; an event does not mix them. When the mode may change remains to be settled. - **Organizer purchasing:** organizers perform checkout themselves on the external seller's website. prevouch assigns vouchers, coordinates exclusive purchase claims, and records outcomes. This chooses assisted manual purchasing rather than automated external checkout; claim and handover details remain open. - **Central fulfillment:** a request is fulfilled once seller payment is confirmed and the purchased ticket is available to the requester. Keep "Purchased, awaiting ticket delivery" distinct. Upfront bank receipt, seller payment, ticket availability, and successor arrival are separate facts; successor arrival is not fulfillment evidence. - **Companions:** the requester manages their own and +n companion requests and supplies any seller-required information for each ticket. Separate companion accounts are optional, not required. The prior allocation contract remains in force: organizer-controlled start, automatic assignments afterward in the established order, no voucher codes for central-purchase members, and the permanent allocation-policy lock at the first successful voucher send or central ticket purchase. Funding eligibility and financial consequences remain in [Define upfront-payment tracking and refunds for central purchases](https://git.s1q.dev/MISChaufen/prevouch/issues/16). Still to settle here: purchase-mode changes, organizer claims and checkout handovers, required participant information, purchase evidence, how tickets become available, partial purchases, and the outcomes consumed by funding and recovery decisions. The glossary now records the agreed requester, companion, event-wide purchase mode, and central fulfillment terms.
Author
Owner

Planning checkpoint — central-purchase questions Q30–Q33

This records the human's revisions and agreements. The central-purchase decision remains open.

  • Q30 revised — purchase-mode changes: an event's purchase mode may change until the first ticket has been bought, when it becomes fixed. This replaces the proposal to freeze it at the first request. Safe switching with existing assignments, disclosed vouchers, upfront funds, or active/uncertain checkouts still needs clarification. This is a purchase-mode rule; the separate allocation-policy rule is not changed by this answer.
  • Q31 agreed — exclusive purchase claims: an organizer must exclusively claim the request and assigned voucher before revealing its code or starting checkout. Other organizers see the owner and progress. Safe release and handover of active work remain to be settled. Central-purchase participants do not receive voucher codes.
  • Q32 revised — seller-direct ticket access: the organizer supplies the email address of the person the ticket is for, so the seller emails ticket access directly to that ticket holder. For a companion ticket, the holder may differ from the requester. The successor/replication email address is separate and belongs to prevouch. The proposed private downloads, ticket uploads, and requester distribution of companions' tickets are not selected. The earlier fulfillment condition is now understood as confirmed seller payment plus ticket availability to the ticket holder; the precise evidence for availability remains open.
  • Q33 agreed — participant information: collect seller-required names and ticket details when requests are submitted, require completeness before checkout starts, and allow corrections beforehand. Once checkout starts, changes go through the purchasing organizer. The central-purchase information includes the intended holder's ticket email address.

The seller-direct ticket workflow is a product requirement, not a new assertion that any particular seller supports separate ticket and replication addresses. Seller-specific support and successor routing remain with Obtain redacted evidence of successor-address routing and Choose successor routing and incoming-voucher trust rules.

The glossary now distinguishes requester, companion, ticket holder, ticket email address, return address, and purchase claim. Remaining central-purchase questions include safe mode changes, purchase and ticket-access evidence, organizer handovers, partial outcomes, and the facts supplied to funding and recovery decisions.

## Planning checkpoint — central-purchase questions Q30–Q33 This records the human's revisions and agreements. The central-purchase decision remains open. - **Q30 revised — purchase-mode changes:** an event's purchase mode may change until the first ticket has been bought, when it becomes fixed. This replaces the proposal to freeze it at the first request. Safe switching with existing assignments, disclosed vouchers, upfront funds, or active/uncertain checkouts still needs clarification. This is a purchase-mode rule; the separate allocation-policy rule is not changed by this answer. - **Q31 agreed — exclusive purchase claims:** an organizer must exclusively claim the request and assigned voucher before revealing its code or starting checkout. Other organizers see the owner and progress. Safe release and handover of active work remain to be settled. Central-purchase participants do not receive voucher codes. - **Q32 revised — seller-direct ticket access:** the organizer supplies the email address of the person the ticket is for, so the seller emails ticket access directly to that ticket holder. For a companion ticket, the holder may differ from the requester. The successor/replication email address is separate and belongs to prevouch. The proposed private downloads, ticket uploads, and requester distribution of companions' tickets are not selected. The earlier fulfillment condition is now understood as confirmed seller payment plus ticket availability to the ticket holder; the precise evidence for availability remains open. - **Q33 agreed — participant information:** collect seller-required names and ticket details when requests are submitted, require completeness before checkout starts, and allow corrections beforehand. Once checkout starts, changes go through the purchasing organizer. The central-purchase information includes the intended holder's ticket email address. The seller-direct ticket workflow is a product requirement, not a new assertion that any particular seller supports separate ticket and replication addresses. Seller-specific support and successor routing remain with [Obtain redacted evidence of successor-address routing](https://git.s1q.dev/MISChaufen/prevouch/issues/13) and [Choose successor routing and incoming-voucher trust rules](https://git.s1q.dev/MISChaufen/prevouch/issues/6). The glossary now distinguishes requester, companion, ticket holder, ticket email address, return address, and purchase claim. Remaining central-purchase questions include safe mode changes, purchase and ticket-access evidence, organizer handovers, partial outcomes, and the facts supplied to funding and recovery decisions.
Author
Owner

Planning checkpoint — central-purchase questions Q34–Q37

The human agreed to all four recommendations. This records further inputs to the open central-purchase decision.

  • Safe purchase-mode changes: pause allocation and establish outstanding outcomes first. A completed purchase locks the mode. Otherwise, resolve outstanding work and safely recover disclosed vouchers before switching. An unrecorded purchase must not be assumed absent, including in self-purchase mode. Detailed recovery and financial consequences stay with their existing decisions.
  • Central fulfillment evidence: record the seller order reference, confirmed seller payment, and seller confirmation that ticket access was sent to the correct holder address. This fulfills the request without requiring the holder to click a link. Paid purchases whose ticket delivery is unconfirmed remain "Purchased, awaiting ticket delivery." Successor arrival and upfront bank receipt remain separate facts. A later delivery failure is an input to recovery, not permission to buy a replacement automatically.
  • Organizer handover: before code disclosure, allow a clean release. After disclosure or checkout starts, require an explicit handover with the current seller status. An uncertain outcome stays held for recovery; a timeout alone does not authorize another purchase.
  • Partial purchase success: retain outcomes per ticket request. If two of Alice's three tickets were bought, preserve those purchases. The third stays unresolved until its checkout outcome is known, then waits for usable stock if safe. Grouped allocation does not guarantee the whole group can be purchased, and partial success is not rolled back.

The glossary now records purchase handover and sharpens central fulfillment to the agreed seller-confirmed sending evidence. Remaining boundaries are the exact first-purchase milestone when seller payment is pending, handling a purchase awaiting seller payment, and the purchase record needed by the funding and recovery decisions. These do not decide bank reconciliation, refund execution, or recovery deadlines.

## Planning checkpoint — central-purchase questions Q34–Q37 The human agreed to all four recommendations. This records further inputs to the open central-purchase decision. - **Safe purchase-mode changes:** pause allocation and establish outstanding outcomes first. A completed purchase locks the mode. Otherwise, resolve outstanding work and safely recover disclosed vouchers before switching. An unrecorded purchase must not be assumed absent, including in self-purchase mode. Detailed recovery and financial consequences stay with their existing decisions. - **Central fulfillment evidence:** record the seller order reference, confirmed seller payment, and seller confirmation that ticket access was sent to the correct holder address. This fulfills the request without requiring the holder to click a link. Paid purchases whose ticket delivery is unconfirmed remain "Purchased, awaiting ticket delivery." Successor arrival and upfront bank receipt remain separate facts. A later delivery failure is an input to recovery, not permission to buy a replacement automatically. - **Organizer handover:** before code disclosure, allow a clean release. After disclosure or checkout starts, require an explicit handover with the current seller status. An uncertain outcome stays held for recovery; a timeout alone does not authorize another purchase. - **Partial purchase success:** retain outcomes per ticket request. If two of Alice's three tickets were bought, preserve those purchases. The third stays unresolved until its checkout outcome is known, then waits for usable stock if safe. Grouped allocation does not guarantee the whole group can be purchased, and partial success is not rolled back. The glossary now records purchase handover and sharpens central fulfillment to the agreed seller-confirmed sending evidence. Remaining boundaries are the exact first-purchase milestone when seller payment is pending, handling a purchase awaiting seller payment, and the purchase record needed by the funding and recovery decisions. These do not decide bank reconciliation, refund execution, or recovery deadlines.
Author
Owner

Planning checkpoint — central-purchase questions Q38–Q40

The human agreed to all three recommendations. The consolidated contract and worked examples will receive a final shared-understanding check before resolution.

  • First-purchase milestone: "bought" means the seller has accepted a binding order, even if payment or ticket delivery is pending. This first purchase commitment permanently locks the event's purchase mode. Applied to the existing allocation-policy contract, it also identifies the first central purchase that locks allocation policy; the separate self-purchase allocation lock remains the first successful voucher send.
  • Pending seller payment: keep the order's requests and vouchers reserved and show "Awaiting seller payment." The purchase claimant remains responsible and may name another organizer to complete payment. Record seller payment confirmation separately. Uncertain or failed orders go through recovery; a pending payment does not permit duplicate checkout.
  • Purchase records: retain linked requests and vouchers, ticket holders, responsible organizers, seller order reference, actual prices and currency, payment and delivery status, and a history of confirmations or corrections. One seller order may cover several requests, with outcomes recorded individually. Funding eligibility, balance/refund calculations, and bank operations remain with Define upfront-payment tracking and refunds for central purchases.

The glossary now defines seller order as the binding purchase commitment, distinct from seller payment, direct ticket-access delivery, upfront bank receipt, and successor arrival.

## Planning checkpoint — central-purchase questions Q38–Q40 The human agreed to all three recommendations. The consolidated contract and worked examples will receive a final shared-understanding check before resolution. - **First-purchase milestone:** "bought" means the seller has accepted a binding order, even if payment or ticket delivery is pending. This first purchase commitment permanently locks the event's purchase mode. Applied to the existing allocation-policy contract, it also identifies the first central purchase that locks allocation policy; the separate self-purchase allocation lock remains the first successful voucher send. - **Pending seller payment:** keep the order's requests and vouchers reserved and show "Awaiting seller payment." The purchase claimant remains responsible and may name another organizer to complete payment. Record seller payment confirmation separately. Uncertain or failed orders go through recovery; a pending payment does not permit duplicate checkout. - **Purchase records:** retain linked requests and vouchers, ticket holders, responsible organizers, seller order reference, actual prices and currency, payment and delivery status, and a history of confirmations or corrections. One seller order may cover several requests, with outcomes recorded individually. Funding eligibility, balance/refund calculations, and bank operations remain with [Define upfront-payment tracking and refunds for central purchases](https://git.s1q.dev/MISChaufen/prevouch/issues/16). The glossary now defines seller order as the binding purchase commitment, distinct from seller payment, direct ticket-access delivery, upfront bank receipt, and successor arrival.
Author
Owner

Resolution — central-purchase workflow and fulfillment

The human confirmed this complete contract and its worked examples in Q41, after agreeing to and revising Q26–Q40. This resolution supersedes the earlier checkpoint proposals for freezing purchase mode at the first request and providing purchased tickets through private prevouch downloads.

Event purchase mode and its lock

Each event has exactly one purchase mode: self-purchase or central purchase. Different events may choose differently; requests within an event do not mix modes.

Purchase mode may change until the first ticket has been bought. Here, "bought" means that the seller has accepted a binding ticket order, even if payment or ticket delivery is still pending. That first purchase commitment permanently fixes the purchase mode.

Before a permitted change, pause allocation and establish outstanding outcomes. Resolve active or uncertain checkouts and safely recover disclosed vouchers before switching. An unrecorded purchase must not be assumed absent, including after a self-purchase voucher was sent. Existing upfront funds and their financial consequences are handled by the funding decision, not silently discarded or reclassified by changing mode.

This is distinct from the allocation-policy lock in Define allocation policies and organizer-triggered shuffling. That policy locks at the first successful voucher send in self-purchase, or the first central ticket purchase. The binding-order milestone above makes the latter precise. A purchase-mode change does not authorize a new shuffle or override an already locked allocation policy.

Requester, companion, and ticket holder

A requester manages their own and +n companion requests. Self +n creates n+1 requests. Companions need no separate prevouch account.

Collect seller-required names, ticket details, and the intended holder's ticket email address when requests are submitted. Require complete information before checkout starts. Corrections are allowed beforehand; changes after checkout starts go through the purchasing organizer. A companion can be the ticket holder even though another person manages the request.

Allocation and organizer purchasing

The event retains its organizer-controlled distribution start and established allocation policy. Afterwards, prevouch automatically assigns usable vouchers to eligible requests in the established order. Funding eligibility is supplied by Define upfront-payment tracking and refunds for central purchases; this decision does not decide how unpaid or partially paid requests behave.

Central purchase is assisted manual purchasing. Organizers complete checkout on the external seller's website. prevouch coordinates voucher assignments and exclusive purchase claims, provides the necessary request and address information, and records outcomes. Multiple requests can be assigned concurrently, including requests from the same requester and an initial batch of eight vouchers.

An organizer must exclusively claim a request and its assigned voucher before revealing the voucher code or starting checkout. Other organizers see the claim owner and progress. A request or voucher cannot be purchased simultaneously by two organizers. Central-purchase members never receive voucher codes.

Before code disclosure, a claim may be cleanly released. After disclosure or checkout starts, transferring responsibility requires an explicit handover containing the current seller status. Uncertain outcomes remain held for recovery. A timeout alone does not authorize releasing the reservation or making a replacement purchase.

Seller-direct ticket access and successor routing

During checkout, the organizer supplies the ticket holder's email address for ticket access. The seller sends ticket-access email directly to that holder, including for companion tickets. Purchased-ticket uploads, private prevouch ticket downloads, and requester redistribution of companion tickets are not the selected workflow.

The organizer separately supplies the prevouch-owned return address for successor/replication emails. Ticket access goes to the ticket holder; successor vouchers return to prevouch and enter the event's common usable stock under the established allocation policy. Successors are not reserved for the person whose purchase produced them.

Separate ticket and successor routing is a product requirement. Exact seller fields, their behavior, and controlled inbound routing remain to be validated by the existing routing decisions; this resolution does not assert that a particular seller configuration has already been verified.

Commitment, seller payment, and fulfillment

Keep these facts distinct: upfront bank receipt, exclusive assignment and claim, accepted binding seller order, seller payment, ticket-access sending, and successor arrival.

  • Accepted order, awaiting seller payment: keep the order's requests and vouchers reserved and show "Awaiting seller payment." The purchase claimant remains responsible and may name another organizer to complete payment. This binding order already counts as a purchase for the permanent mode/policy lock.
  • Seller payment confirmed, delivery unconfirmed: show "Purchased, awaiting ticket delivery." Confirmed payment alone is not fulfillment.
  • Fulfilled: seller payment is confirmed and the seller confirms that ticket access was sent to the correct ticket holder email address. Record the seller order reference and those confirmations. The holder does not have to click the link.
  • Failed or uncertain purchase: retain the actual outcome and use recovery. Establish whether a seller order exists before any replacement purchase. Safely unsuccessful work may return to waiting for usable stock under the established order; uncertain work stays held.

Seller-confirmed sending is the agreed central-purchase evidence. The separate self-purchase fulfillment rule remains recipient-mail-server acceptance of the voucher email. Neither mode's fulfillment nor a successor's arrival guarantees admission. A later delivery failure is a recovery input, not permission to buy another ticket automatically.

Purchase records and partial outcomes

Retain linked requests and vouchers, ticket holders, responsible organizers, seller order references, actual prices and currency, payment and delivery states, and a history of confirmations and corrections. One seller order may cover several requests, with outcomes recorded individually.

If only some of a requester's tickets are bought, preserve those purchases. Each remaining request keeps its actual failed, uncertain, or waiting outcome. Grouped allocation preserves the established group turn; it does not guarantee sufficient stock to purchase the whole group, and partial success is not rolled back.

These records supply the purchase commitments, seller spending, and unserved demand needed by the funding decision. They do not themselves choose balance calculations, fee allocation, refund rules, bank reconciliation, or bank-transfer execution.

Worked examples

  1. Eight vouchers, nine eligible requests: Alice requests three tickets, Bob two, and Cara four. Under FCFS with that entry order, the initial eight assignments serve Alice's three, Bob's two, and Cara's first three. Cara's fourth is next. Under a recorded grouped order of Bob, Cara, Alice, assignments serve Bob's two, Cara's four, and Alice's first two; Alice's original third request is next. Under a recorded everyone order of C1, A1, B1, C2, A2, C3, B2, C4, A3, the first eight are assigned and A3 is next. These are purchasing assignments, not proof of bought or fulfilled tickets. Later stock serves the remaining eligible requests without a new shuffle.
  2. Two organizers: Dana exclusively claims Alice's first assigned request. Eli sees Dana's ownership and cannot start another purchase for it. Before disclosure Dana can release cleanly; after disclosure or checkout starts, Eli can take over only through an explicit handover with the seller status established.
  3. Binding order with payment pending: Dana records the seller's accepted binding order. Purchase mode, and the central event's allocation policy, are now permanently fixed. Requests and vouchers remain reserved while another named organizer completes seller payment. Payment confirmation without confirmed ticket-access sending leaves the requests awaiting delivery. Confirming both fulfills the affected requests individually.
  4. Direct companion delivery: Alice manages requests for herself and two companions and supplies their required information. The purchasing organizer enters each holder's ticket email address and the separate prevouch successor return address. The seller sends each holder ticket access; any successor voucher returns to prevouch. Companion accounts and ticket uploads into prevouch are unnecessary.
  5. Partial success: Two of Alice's three purchases succeed. Preserve those two purchases and their individual payment/delivery states. If the third checkout outcome is unknown, hold it for recovery. If it is verified unsuccessful and safely released, that request waits for usable stock under the established order. The financial consequence of buying only two tickets belongs to the funding/refund decision.
  6. Unusable voucher or interrupted checkout: a reserved voucher becomes unusable, or checkout is interrupted. Establish whether the seller accepted an order before retrying or replacing anything. Keep the failed or unusable voucher and purchase history recorded; use recovery for uncertain outcomes. Missing successors neither undo successful purchases nor establish payment or admission.

Remaining decision ownership

No additional independent ticket is needed for this resolution: the existing decisions cover the remaining work. The shared terms are recorded in the root GLOSSARY.md. No real purchase or bank operation was performed.

## Resolution — central-purchase workflow and fulfillment The human confirmed this complete contract and its worked examples in Q41, after agreeing to and revising Q26–Q40. This resolution supersedes the earlier checkpoint proposals for freezing purchase mode at the first request and providing purchased tickets through private prevouch downloads. ### Event purchase mode and its lock Each event has exactly one purchase mode: self-purchase or central purchase. Different events may choose differently; requests within an event do not mix modes. Purchase mode may change until the first ticket has been bought. Here, "bought" means that the seller has accepted a binding ticket order, even if payment or ticket delivery is still pending. That first purchase commitment permanently fixes the purchase mode. Before a permitted change, pause allocation and establish outstanding outcomes. Resolve active or uncertain checkouts and safely recover disclosed vouchers before switching. An unrecorded purchase must not be assumed absent, including after a self-purchase voucher was sent. Existing upfront funds and their financial consequences are handled by the funding decision, not silently discarded or reclassified by changing mode. This is distinct from the allocation-policy lock in [Define allocation policies and organizer-triggered shuffling](https://git.s1q.dev/MISChaufen/prevouch/issues/14). That policy locks at the first successful voucher send in self-purchase, or the first central ticket purchase. The binding-order milestone above makes the latter precise. A purchase-mode change does not authorize a new shuffle or override an already locked allocation policy. ### Requester, companion, and ticket holder A requester manages their own and +n companion requests. Self +n creates n+1 requests. Companions need no separate prevouch account. Collect seller-required names, ticket details, and the intended holder's ticket email address when requests are submitted. Require complete information before checkout starts. Corrections are allowed beforehand; changes after checkout starts go through the purchasing organizer. A companion can be the ticket holder even though another person manages the request. ### Allocation and organizer purchasing The event retains its organizer-controlled distribution start and established allocation policy. Afterwards, prevouch automatically assigns usable vouchers to eligible requests in the established order. Funding eligibility is supplied by [Define upfront-payment tracking and refunds for central purchases](https://git.s1q.dev/MISChaufen/prevouch/issues/16); this decision does not decide how unpaid or partially paid requests behave. Central purchase is assisted manual purchasing. Organizers complete checkout on the external seller's website. prevouch coordinates voucher assignments and exclusive purchase claims, provides the necessary request and address information, and records outcomes. Multiple requests can be assigned concurrently, including requests from the same requester and an initial batch of eight vouchers. An organizer must exclusively claim a request and its assigned voucher before revealing the voucher code or starting checkout. Other organizers see the claim owner and progress. A request or voucher cannot be purchased simultaneously by two organizers. Central-purchase members never receive voucher codes. Before code disclosure, a claim may be cleanly released. After disclosure or checkout starts, transferring responsibility requires an explicit handover containing the current seller status. Uncertain outcomes remain held for recovery. A timeout alone does not authorize releasing the reservation or making a replacement purchase. ### Seller-direct ticket access and successor routing During checkout, the organizer supplies the ticket holder's email address for ticket access. The seller sends ticket-access email directly to that holder, including for companion tickets. Purchased-ticket uploads, private prevouch ticket downloads, and requester redistribution of companion tickets are not the selected workflow. The organizer separately supplies the prevouch-owned return address for successor/replication emails. Ticket access goes to the ticket holder; successor vouchers return to prevouch and enter the event's common usable stock under the established allocation policy. Successors are not reserved for the person whose purchase produced them. Separate ticket and successor routing is a product requirement. Exact seller fields, their behavior, and controlled inbound routing remain to be validated by the existing routing decisions; this resolution does not assert that a particular seller configuration has already been verified. ### Commitment, seller payment, and fulfillment Keep these facts distinct: upfront bank receipt, exclusive assignment and claim, accepted binding seller order, seller payment, ticket-access sending, and successor arrival. - **Accepted order, awaiting seller payment:** keep the order's requests and vouchers reserved and show "Awaiting seller payment." The purchase claimant remains responsible and may name another organizer to complete payment. This binding order already counts as a purchase for the permanent mode/policy lock. - **Seller payment confirmed, delivery unconfirmed:** show "Purchased, awaiting ticket delivery." Confirmed payment alone is not fulfillment. - **Fulfilled:** seller payment is confirmed and the seller confirms that ticket access was sent to the correct ticket holder email address. Record the seller order reference and those confirmations. The holder does not have to click the link. - **Failed or uncertain purchase:** retain the actual outcome and use recovery. Establish whether a seller order exists before any replacement purchase. Safely unsuccessful work may return to waiting for usable stock under the established order; uncertain work stays held. Seller-confirmed sending is the agreed central-purchase evidence. The separate self-purchase fulfillment rule remains recipient-mail-server acceptance of the voucher email. Neither mode's fulfillment nor a successor's arrival guarantees admission. A later delivery failure is a recovery input, not permission to buy another ticket automatically. ### Purchase records and partial outcomes Retain linked requests and vouchers, ticket holders, responsible organizers, seller order references, actual prices and currency, payment and delivery states, and a history of confirmations and corrections. One seller order may cover several requests, with outcomes recorded individually. If only some of a requester's tickets are bought, preserve those purchases. Each remaining request keeps its actual failed, uncertain, or waiting outcome. Grouped allocation preserves the established group turn; it does not guarantee sufficient stock to purchase the whole group, and partial success is not rolled back. These records supply the purchase commitments, seller spending, and unserved demand needed by the funding decision. They do not themselves choose balance calculations, fee allocation, refund rules, bank reconciliation, or bank-transfer execution. ### Worked examples 1. **Eight vouchers, nine eligible requests:** Alice requests three tickets, Bob two, and Cara four. Under FCFS with that entry order, the initial eight assignments serve Alice's three, Bob's two, and Cara's first three. Cara's fourth is next. Under a recorded grouped order of Bob, Cara, Alice, assignments serve Bob's two, Cara's four, and Alice's first two; Alice's original third request is next. Under a recorded everyone order of C1, A1, B1, C2, A2, C3, B2, C4, A3, the first eight are assigned and A3 is next. These are purchasing assignments, not proof of bought or fulfilled tickets. Later stock serves the remaining eligible requests without a new shuffle. 2. **Two organizers:** Dana exclusively claims Alice's first assigned request. Eli sees Dana's ownership and cannot start another purchase for it. Before disclosure Dana can release cleanly; after disclosure or checkout starts, Eli can take over only through an explicit handover with the seller status established. 3. **Binding order with payment pending:** Dana records the seller's accepted binding order. Purchase mode, and the central event's allocation policy, are now permanently fixed. Requests and vouchers remain reserved while another named organizer completes seller payment. Payment confirmation without confirmed ticket-access sending leaves the requests awaiting delivery. Confirming both fulfills the affected requests individually. 4. **Direct companion delivery:** Alice manages requests for herself and two companions and supplies their required information. The purchasing organizer enters each holder's ticket email address and the separate prevouch successor return address. The seller sends each holder ticket access; any successor voucher returns to prevouch. Companion accounts and ticket uploads into prevouch are unnecessary. 5. **Partial success:** Two of Alice's three purchases succeed. Preserve those two purchases and their individual payment/delivery states. If the third checkout outcome is unknown, hold it for recovery. If it is verified unsuccessful and safely released, that request waits for usable stock under the established order. The financial consequence of buying only two tickets belongs to the funding/refund decision. 6. **Unusable voucher or interrupted checkout:** a reserved voucher becomes unusable, or checkout is interrupted. Establish whether the seller accepted an order before retrying or replacing anything. Keep the failed or unusable voucher and purchase history recorded; use recovery for uncertain outcomes. Missing successors neither undo successful purchases nor establish payment or admission. ### Remaining decision ownership - [Define upfront-payment tracking and refunds for central purchases](https://git.s1q.dev/MISChaufen/prevouch/issues/16): funding eligibility, upfront receipt and matching, financial commitments and spending, partial funding/purchases, mode-change financial consequences, and refunds. - [Define ticket-request allocation and fulfillment](https://git.s1q.dev/MISChaufen/prevouch/issues/5): compose this workflow with allocation and financial contracts into the request lifecycle across both modes. - [Decide stalled-voucher and delivery-failure recovery](https://git.s1q.dev/MISChaufen/prevouch/issues/7): detailed recovery procedures, safe release, failed orders, unusable vouchers, delivery problems, and deadlines. - [Obtain redacted evidence of successor-address routing](https://git.s1q.dev/MISChaufen/prevouch/issues/13) and [Choose successor routing and incoming-voucher trust rules](https://git.s1q.dev/MISChaufen/prevouch/issues/6): verify separate ticket-access and successor-address behavior, actual recipient fields, return aliases, and trusted ingress. - [Define delivery addresses, email templates, and notification preferences](https://git.s1q.dev/MISChaufen/prevouch/issues/9): participant and organizer notifications respecting direct seller delivery and organizer-only voucher instructions. - [Define administrator authority, queue visibility, and event lifecycle](https://git.s1q.dev/MISChaufen/prevouch/issues/10): permissions and visibility for claims, handovers, payment/delivery confirmations, and corrections. - [Choose the application architecture and deployment contract](https://git.s1q.dev/MISChaufen/prevouch/issues/11) and [Evaluate member and admin journeys in four live-switchable designs](https://git.s1q.dev/MISChaufen/prevouch/issues/12): implementability and a simulated demonstration of the agreed workflow, respectively. No additional independent ticket is needed for this resolution: the existing decisions cover the remaining work. The shared terms are recorded in the root GLOSSARY.md. No real purchase or bank operation was performed.
phg 2026-10-22 10:44:27 +00:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Reference
MISChaufen/prevouch#15
No description provided.