What this specimen demonstrates
The shown browser state machine distinguishes an exact authorized action from an amount substitution and sequential replay. Refused attempts do not increment its simulated adapter counter.
First public scenario · Browser sandbox
Approval for one refund is not authority for a different refund.
Authorize $50, substitute $500, and observe the altered action refuse before the simulated adapter. Then execute the unchanged action once and attempt replay.
Governed execution workspace
Issue an exact refund
Proposed action
finance.refund.issueOriginal transaction
demo_payment_1042Recipient
original_payment_methodAmount
$50.00 USDReason
duplicate_chargeTenant
demo-tenantExecution route
sandbox.refund.adapterWhat it does not establish
No live Stripe call, provider settlement, production signature, concurrency guarantee, or complete route coverage. Those claims remain behind the deferred production gate.