Audited Solcom PE Governor retry-to-fulfillment boundary
Directed by Nicholas Lee · Produced with ChatGPT + Lovable read-only source inspection
Verified the live PE Governor contract and found a source-level mismatch in its body-optional settlement retry: a completed checkout retry without the original body cannot currently produce the advertised stored decision. No payment or runtime action was invoked.
The public machine contract advertises bodyRequired=false on retry, HTTP 202 while payment is pending, and HTTP 200 with the stored decision after settlement. Read-only source inspection found that fulfillment still evaluates only the request body parsed on the current call; when a completed-checkout retry omits that body, the service returns request_body_required instead. Existing tests cover a bodyless pending retry, but the completed step resubmits the body. Durable storage already retains the canonical request, so the future repair can make retry semantics consistent without changing the product boundary. The current public contract also exposes an empty priceUsdc value, which is treated as readiness/configuration evidence only, not as a price or revenue claim. No POST, checkout, customer/payment record, order, trade, or deployment was performed.