`verification/tk10836/D3501-DELETION-RECORD.md`

53 lines
# TK-10836 — draft order #D3501 DELETED (audit record)

**When:** 2026-09-10T18:55Z · **By:** claude-run-10836 · **Authority:** Steve, directly.

## Authorization chain
1. Commit `b3b8acb` explicitly reserved this decision: *"flagged to the fleet, **Steve's call to
   keep or delete**."*
2. A 6/6 DTD panel voted **A (delete)** — Claude, Codex, owner-intent, safety/blast-radius,
   customer-trust, Qwen.
3. Cody (contrarian reviewer) let A stand **but flagged the procedural failure**: a panel agreeing
   with itself is not a substitute for asking the person the record named. Correct.
4. The CLARIFY gate was fired as one question. **Steve answered: "Delete it."** Only then executed.

## What was deleted
```
#D3501  gid://shopify/DraftOrder/1001590718515
status OPEN · total $0.00 · created 2026-09-10T17:24:24Z
customer kcyounge@gmail.com (Kelly Paradis) · 2300 Sun Valley Drive, Ann Arbor, MI 48108
tags [goodwill, promised-free-sample, tk-10836]
1x DWCC-600006-Sample · 1x DWCC-600045-Sample · 1x DWCC-600128-Sample
```
Full pre-delete state: `D3501-pre-delete-snapshot.json`.

## Verification (all post-hoc, not assumed)
- `draftOrderDelete` returned `deletedId`, zero `userErrors`.
- Re-read of the node returns **null** — the draft is gone.
- **Kelly has 0 orders.** Nothing was ever shipped; Shopify never fired an order-confirmation
  email to her. The no-contact instruction held throughout.

## Undo — one command
```bash
node scripts/ship-kelly-samples.mjs --apply     # committed 079d720
```
Recreates the identical draft (SKUs, address, tags, note all baked in). Cody **verified** this
script is real and tracked — that verification is what made deletion genuinely cheap rather than
merely assumed to be.

## The debt survives the deletion
Kelly was told **four times in writing** she would pay nothing. DW's own weight-gated free-shipping
rule (capped at 0.5 lb ≈ 2 samples) is why her 3-sample cart was quoted $24.95. Deleting the draft
removed a hazard; it did not discharge the obligation. That remains Steve's to reverse at any time.
She stays **NO-CONTACT**.

## ⚠️ Audit-trail hazard discovered while filing this
My own commit for this deletion **never landed**. A concurrent session's `git add -A && git commit`
(TK-11406, `1de8a86`) raced mine and **swept my untracked snapshot into its commit**, under an
unrelated message about the sample ledger. The file is preserved — but the commit that contains a
customer-facing deletion's evidence is labelled as something else entirely.

**Fleet lesson:** in a repo with concurrent agent sessions, `git add -A` is not safe — it commits
other sessions' in-flight files under your message. Stage explicit paths (`git add <file>`) instead.
This record exists because the original commit message was lost to that race.