Manual checklist is advisory until API wiring is enabled. The actual payment record must be accepted by the runtime API. The runtime API must enforce authenticated Staff, OPEN shift, same shop/terminal, permission, idempotency, and audit. UI checkbox/list is not authorization.
StaffManager/Owner อนุมัติ refund/void
API wiring foundation
Payment record demo · blocked by default · explicit submit only
blocked: API wiring disabled
สถานะยังไม่พร้อม
Client hintไม่ใช่ authority
API wiring disabled until authenticated staging-pilot runtime is available.
Runtime บังคับที่ server:Client hint ไม่ใช่ authority · UI ปิดไม่ใช่ security · payment record ต้องผ่าน auth + OPEN shift + audit
Client hints are not authority. Runtime API must enforce authenticated session, role/shop/terminal context, same-shop object authorization, idempotency where required, and audit. Blocked UI is not security; this cannot operate without deployed auth/runtime/DB/seed.
API wiring foundation · ไม่เรียกอัตโนมัติเมื่อ render
