TK-10836: audit record for the D3501 deletion (original commit lost to an add -A race)

12cc71b457ce980271fe75d9990f04676980970e · 2026-09-10 11:56:27 -0700 · Steve Abrams

Steve authorized the delete directly at the CLARIFY gate. Executed, verified: node
re-read returns null, Kelly has 0 orders, nothing shipped, no confirmation email fired.
Undo is one command (scripts/ship-kelly-samples.mjs --apply, committed 079d720).

Filing this because my original deletion commit never landed: a concurrent session's
'git add -A && git commit' (1de8a86, TK-11406) raced mine and swept my untracked
snapshot into its commit under an unrelated message. Evidence for a customer-facing
deletion ended up labelled as a sample-ledger change.

Fleet lesson recorded in the file: with concurrent agent sessions in one repo, 'git
add -A' commits other sessions' in-flight files under your message. Stage explicit paths.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Files touched

A verification/tk10836/D3501-DELETION-RECORD.md

Diff

commit 12cc71b457ce980271fe75d9990f04676980970e
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Sep 10 11:56:27 2026 -0700

    TK-10836: audit record for the D3501 deletion (original commit lost to an add -A race)
    
    Steve authorized the delete directly at the CLARIFY gate. Executed, verified: node
    re-read returns null, Kelly has 0 orders, nothing shipped, no confirmation email fired.
    Undo is one command (scripts/ship-kelly-samples.mjs --apply, committed 079d720).
    
    Filing this because my original deletion commit never landed: a concurrent session's
    'git add -A && git commit' (1de8a86, TK-11406) raced mine and swept my untracked
    snapshot into its commit under an unrelated message. Evidence for a customer-facing
    deletion ended up labelled as a sample-ledger change.
    
    Fleet lesson recorded in the file: with concurrent agent sessions in one repo, 'git
    add -A' commits other sessions' in-flight files under your message. Stage explicit paths.
    
    Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 verification/tk10836/D3501-DELETION-RECORD.md | 52 +++++++++++++++++++++++++++
 1 file changed, 52 insertions(+)

diff --git a/verification/tk10836/D3501-DELETION-RECORD.md b/verification/tk10836/D3501-DELETION-RECORD.md
new file mode 100644
index 0000000..047be01
--- /dev/null
+++ b/verification/tk10836/D3501-DELETION-RECORD.md
@@ -0,0 +1,52 @@
+# TK-10836 — draft order #D3501 DELETED (audit record)
+
+**When:** 2026-09-10T18:55Z · **By:** claude-run-10836 · **Authority:** Steve, directly.
+
+## Authorization chain
+1. Commit `b3b8acb` explicitly reserved this decision: *"flagged to the fleet, **Steve's call to
+   keep or delete**."*
+2. A 6/6 DTD panel voted **A (delete)** — Claude, Codex, owner-intent, safety/blast-radius,
+   customer-trust, Qwen.
+3. Cody (contrarian reviewer) let A stand **but flagged the procedural failure**: a panel agreeing
+   with itself is not a substitute for asking the person the record named. Correct.
+4. The CLARIFY gate was fired as one question. **Steve answered: "Delete it."** Only then executed.
+
+## What was deleted
+```
+#D3501  gid://shopify/DraftOrder/1001590718515
+status OPEN · total $0.00 · created 2026-09-10T17:24:24Z
+customer kcyounge@gmail.com (Kelly Paradis) · 2300 Sun Valley Drive, Ann Arbor, MI 48108
+tags [goodwill, promised-free-sample, tk-10836]
+1x DWCC-600006-Sample · 1x DWCC-600045-Sample · 1x DWCC-600128-Sample
+```
+Full pre-delete state: `D3501-pre-delete-snapshot.json`.
+
+## Verification (all post-hoc, not assumed)
+- `draftOrderDelete` returned `deletedId`, zero `userErrors`.
+- Re-read of the node returns **null** — the draft is gone.
+- **Kelly has 0 orders.** Nothing was ever shipped; Shopify never fired an order-confirmation
+  email to her. The no-contact instruction held throughout.
+
+## Undo — one command
+```bash
+node scripts/ship-kelly-samples.mjs --apply     # committed 079d720
+```
+Recreates the identical draft (SKUs, address, tags, note all baked in). Cody **verified** this
+script is real and tracked — that verification is what made deletion genuinely cheap rather than
+merely assumed to be.
+
+## The debt survives the deletion
+Kelly was told **four times in writing** she would pay nothing. DW's own weight-gated free-shipping
+rule (capped at 0.5 lb ≈ 2 samples) is why her 3-sample cart was quoted $24.95. Deleting the draft
+removed a hazard; it did not discharge the obligation. That remains Steve's to reverse at any time.
+She stays **NO-CONTACT**.
+
+## ⚠️ Audit-trail hazard discovered while filing this
+My own commit for this deletion **never landed**. A concurrent session's `git add -A && git commit`
+(TK-11406, `1de8a86`) raced mine and **swept my untracked snapshot into its commit**, under an
+unrelated message about the sample ledger. The file is preserved — but the commit that contains a
+customer-facing deletion's evidence is labelled as something else entirely.
+
+**Fleet lesson:** in a repo with concurrent agent sessions, `git add -A` is not safe — it commits
+other sessions' in-flight files under your message. Stage explicit paths (`git add <file>`) instead.
+This record exists because the original commit message was lost to that race.

← 1de8a86 TK-11406: sample-ledger counts free units title-agnostically · back to Dw Signup Fulfillment · (newest)