Denies a still-undecided debit nothing can fund any more, so the customer and ops see the outcome before the file does. A row the predicate spares is left alone. A retry publishes again, in case the first send failed.
The withdrawal behind an APPROVED decision already filed as Pay was returned
(e.g. a failed sweep), so the ledger no longer holds what the bank pays.
Stamps mismatchAt once and returns the decisions newly flagged.
Records a debit Victor reported Pending. Returns null for an account CFX
does not hold. Upserts on the Victor transaction id, so a redelivery that
corrects the DDA or the amount lands while the row is still undecided.
A Success webhook. Only a DENIED decision can mismatch: CFX told the bank
to return the debit and refunded the ledger, yet the money moved. A PENDING
row has refunded nothing — during rollout ops decides in Dart's portal and
the platform row stays PENDING on every legitimately-paid item.
Idempotent: a redelivery must not walk settled_at forward or re-log.
The process default: built from each dependency's own
instance().