Record native saved Checkout recovery acceptance and cleanup

GITHUB_ISSUES.md

@@ -1,6 +1,6 @@
 # GitHub Issue Backlog: Secure Commerce Program
 
-**Test annual dues — October 17, 2026, core and bounded native recovery verified in staging:** the club sandbox and test screen remain at application source `71f59e2`. In addition to the [core hosted checks](./docs/TEST_DUES_HOSTED_EVIDENCE.md), fresh native caller/Auth, concurrency, lost-response, missed-callback, mismatch, refund/hold, old-year and failed-card/expiration checks passed within the [dated qualification limits](./docs/TEST_DUES_NATIVE_RECOVERY.md). Eight new fictional accounts were removed; payment evidence was retained and the test webhook restored. [Officer review](./docs/officers/TEST_DUES.md). Real payments, production membership, family invitations and final club policies remain unavailable. Earlier checkpoints below are historical.
+**Saved test Checkout — October 18, 2026, native clarification verified:** Hosting `30d5f27` now explains when Resume cannot reopen the same open, inactive purchase. A fresh sandbox decline/expiry retained the original order and term; no replacement payment or membership was created. Both owned test accounts were retired, seven financial-record hashes stayed unchanged and two expiry receipts were retained. Dues Functions remain v1/source `71f59e2`. [Dated evidence](./docs/TEST_DUES_RECOVERY_MESSAGE.md) and [officer steps](./docs/officers/TEST_DUES.md). Real payments, production, family invitations and final club policies remain separate. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

IMPLEMENTATION_PLAN.md

@@ -1,6 +1,6 @@
 # MPRC Secure Commerce Implementation Plan
 
-**Test annual dues — October 17, 2026, core and bounded native recovery verified in staging:** the club sandbox and test screen remain at application source `71f59e2`. In addition to the [core hosted checks](./docs/TEST_DUES_HOSTED_EVIDENCE.md), fresh native caller/Auth, concurrency, lost-response, missed-callback, mismatch, refund/hold, old-year and failed-card/expiration checks passed within the [dated qualification limits](./docs/TEST_DUES_NATIVE_RECOVERY.md). Eight new fictional accounts were removed; payment evidence was retained and the test webhook restored. [Officer review](./docs/officers/TEST_DUES.md). Real payments, production membership, family invitations and final club policies remain unavailable. Earlier checkpoints below are historical.
+**Saved test Checkout — October 18, 2026, native clarification verified:** Hosting `30d5f27` now explains when Resume cannot reopen the same open, inactive purchase. A fresh sandbox decline/expiry retained the original order and term; no replacement payment or membership was created. Both owned test accounts were retired, seven financial-record hashes stayed unchanged and two expiry receipts were retained. Dues Functions remain v1/source `71f59e2`. [Dated evidence](./docs/TEST_DUES_RECOVERY_MESSAGE.md) and [officer steps](./docs/officers/TEST_DUES.md). Real payments, production, family invitations and final club policies remain separate. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

OFFICER_START_HERE.md

@@ -1,6 +1,6 @@
 # MPRC Website: Officer Start Here
 
-**Test annual dues — October 17, 2026, core and bounded native recovery verified in staging:** the club sandbox and test screen remain at application source `71f59e2`. In addition to the [core hosted checks](./docs/TEST_DUES_HOSTED_EVIDENCE.md), fresh native caller/Auth, concurrency, lost-response, missed-callback, mismatch, refund/hold, old-year and failed-card/expiration checks passed within the [dated qualification limits](./docs/TEST_DUES_NATIVE_RECOVERY.md). Eight new fictional accounts were removed; payment evidence was retained and the test webhook restored. [Officer review](./docs/officers/TEST_DUES.md). Real payments, production membership, family invitations and final club policies remain unavailable. Earlier checkpoints below are historical.
+**Saved test Checkout — October 18, 2026, native clarification verified:** Hosting `30d5f27` now explains when Resume cannot reopen the same open, inactive purchase. A fresh sandbox decline/expiry retained the original order and term; no replacement payment or membership was created. Both owned test accounts were retired, seven financial-record hashes stayed unchanged and two expiry receipts were retained. Dues Functions remain v1/source `71f59e2`. [Dated evidence](./docs/TEST_DUES_RECOVERY_MESSAGE.md) and [officer steps](./docs/officers/TEST_DUES.md). Real payments, production, family invitations and final club policies remain separate. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

OPERATIONS_RUNBOOK.md

@@ -1,6 +1,6 @@
 # MPRC Platform Operations Runbook
 
-**Test annual dues — October 17, 2026, core and bounded native recovery verified in staging:** the club sandbox and test screen remain at application source `71f59e2`. In addition to the [core hosted checks](./docs/TEST_DUES_HOSTED_EVIDENCE.md), fresh native caller/Auth, concurrency, lost-response, missed-callback, mismatch, refund/hold, old-year and failed-card/expiration checks passed within the [dated qualification limits](./docs/TEST_DUES_NATIVE_RECOVERY.md). Eight new fictional accounts were removed; payment evidence was retained and the test webhook restored. [Officer review](./docs/officers/TEST_DUES.md). Real payments, production membership, family invitations and final club policies remain unavailable. Earlier checkpoints below are historical.
+**Saved test Checkout — October 18, 2026, native clarification verified:** Hosting `30d5f27` now explains when Resume cannot reopen the same open, inactive purchase. A fresh sandbox decline/expiry retained the original order and term; no replacement payment or membership was created. Both owned test accounts were retired, seven financial-record hashes stayed unchanged and two expiry receipts were retained. Dues Functions remain v1/source `71f59e2`. [Dated evidence](./docs/TEST_DUES_RECOVERY_MESSAGE.md) and [officer steps](./docs/officers/TEST_DUES.md). Real payments, production, family invitations and final club policies remain separate. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

SECURITY.md

@@ -1,6 +1,6 @@
 # MPRC Security, Privacy, and Risk Plan
 
-**Test annual dues — October 17, 2026, core and bounded native recovery verified in staging:** the club sandbox and test screen remain at application source `71f59e2`. In addition to the [core hosted checks](./docs/TEST_DUES_HOSTED_EVIDENCE.md), fresh native caller/Auth, concurrency, lost-response, missed-callback, mismatch, refund/hold, old-year and failed-card/expiration checks passed within the [dated qualification limits](./docs/TEST_DUES_NATIVE_RECOVERY.md). Eight new fictional accounts were removed; payment evidence was retained and the test webhook restored. [Officer review](./docs/officers/TEST_DUES.md). Real payments, production membership, family invitations and final club policies remain unavailable. Earlier checkpoints below are historical.
+**Saved test Checkout — October 18, 2026, native clarification verified:** Hosting `30d5f27` now explains when Resume cannot reopen the same open, inactive purchase. A fresh sandbox decline/expiry retained the original order and term; no replacement payment or membership was created. Both owned test accounts were retired, seven financial-record hashes stayed unchanged and two expiry receipts were retained. Dues Functions remain v1/source `71f59e2`. [Dated evidence](./docs/TEST_DUES_RECOVERY_MESSAGE.md) and [officer steps](./docs/officers/TEST_DUES.md). Real payments, production, family invitations and final club policies remain separate. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

STRIPE_COMMERCE_DESIGN.md

@@ -1,6 +1,6 @@
 # Stripe, Race Registration, and Merchandise Design
 
-**Test annual dues — October 17, 2026, core and bounded native recovery verified in staging:** the club sandbox and test screen remain at application source `71f59e2`. In addition to the [core hosted checks](./docs/TEST_DUES_HOSTED_EVIDENCE.md), fresh native caller/Auth, concurrency, lost-response, missed-callback, mismatch, refund/hold, old-year and failed-card/expiration checks passed within the [dated qualification limits](./docs/TEST_DUES_NATIVE_RECOVERY.md). Eight new fictional accounts were removed; payment evidence was retained and the test webhook restored. [Officer review](./docs/officers/TEST_DUES.md). Real payments, production membership, family invitations and final club policies remain unavailable. Earlier checkpoints below are historical.
+**Saved test Checkout — October 18, 2026, native clarification verified:** Hosting `30d5f27` now explains when Resume cannot reopen the same open, inactive purchase. A fresh sandbox decline/expiry retained the original order and term; no replacement payment or membership was created. Both owned test accounts were retired, seven financial-record hashes stayed unchanged and two expiry receipts were retained. Dues Functions remain v1/source `71f59e2`. [Dated evidence](./docs/TEST_DUES_RECOVERY_MESSAGE.md) and [officer steps](./docs/officers/TEST_DUES.md). Real payments, production, family invitations and final club policies remain separate. Earlier checkpoints below are historical.
 
 **#731 fictional native acceptance — 2026-10-14:** actual signup, full fictional credit return, same-bib recipient transfer, revoke and original credit ownership passed in staging. Native committed/lost-response retry preserved one seat/receipt/audit, did not resurrect cancellation and could not bypass current authority. [Proof and supervised gate](./docs/officers/STAGING_COMMUNITY.md#fictional-race-member-screen--731-source-prepared). These integer-credit simulations are not provider-backed payment/refund evidence; no real policy, finance authorization, Stripe object or production launch changed. Complete acceptance/cleanup receipt and fresh fake fixtures remain prerequisites; earlier #731/#732 source-only notes below are historical.
 

SYSTEM_DESIGN.md

@@ -1,6 +1,6 @@
 # MPRC Platform System Design
 
-**Test annual dues — October 17, 2026, core and bounded native recovery verified in staging:** the club sandbox and test screen remain at application source `71f59e2`. In addition to the [core hosted checks](./docs/TEST_DUES_HOSTED_EVIDENCE.md), fresh native caller/Auth, concurrency, lost-response, missed-callback, mismatch, refund/hold, old-year and failed-card/expiration checks passed within the [dated qualification limits](./docs/TEST_DUES_NATIVE_RECOVERY.md). Eight new fictional accounts were removed; payment evidence was retained and the test webhook restored. [Officer review](./docs/officers/TEST_DUES.md). Real payments, production membership, family invitations and final club policies remain unavailable. Earlier checkpoints below are historical.
+**Saved test Checkout — October 18, 2026, native clarification verified:** Hosting `30d5f27` now explains when Resume cannot reopen the same open, inactive purchase. A fresh sandbox decline/expiry retained the original order and term; no replacement payment or membership was created. Both owned test accounts were retired, seven financial-record hashes stayed unchanged and two expiry receipts were retained. Dues Functions remain v1/source `71f59e2`. [Dated evidence](./docs/TEST_DUES_RECOVERY_MESSAGE.md) and [officer steps](./docs/officers/TEST_DUES.md). Real payments, production, family invitations and final club policies remain separate. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

docs/TEST_DUES_ENGINEERING.md

@@ -22,4 +22,4 @@ Local tests use transactional doubles and the installed SDK's real signature ver
 
 ## Saved Checkout clarification — #747
 
-The screen reports a reconciliation stop when a validated Resume result has no Checkout URL and the subsequent fresh server status still identifies the same open, inactive purchase. A newer active/held status takes precedence. Identity/session changes and freshness expiry clear the message through the existing request fences. The message does not infer provider expiry or payment failure and does not prepare, unlock or replace a purchase. No schema, backend, Rules, provider or migration change is required. Hosted verification is **NOT AVAILABLE YET** until the separately recorded #747 release and fresh-fixture test.
+The screen reports a reconciliation stop when a validated Resume result has no Checkout URL and the subsequent fresh server status still identifies the same open, inactive purchase. A newer active/held status takes precedence. Identity/session changes and freshness expiry clear the message through the existing request fences. The message does not infer provider expiry or payment failure and does not prepare, unlock or replace a purchase. No schema, backend, Rules, provider or migration change is required. The [October 18 native receipt](./TEST_DUES_RECOVERY_MESSAGE.md) verifies the hosted decline/expiry/Resume message, repeated Resume, refresh and sign-out with a fresh fictional fixture. Both owned accounts were retired with financial evidence retained. Hosting is `30d5f27`; both dues Functions remain v1 at `71f59e2`.

docs/TEST_DUES_HOSTED_EVIDENCE.md

@@ -1,5 +1,7 @@
 # Test dues hosted evidence — October 17, 2026
 
+**October 18 follow-up:** the [saved-Checkout clarification and native cleanup](./TEST_DUES_RECOVERY_MESSAGE.md) passed at Hosting `30d5f27`; dues Functions remain v1 at `71f59e2`. Earlier dated results below remain historical. Real payments and production remain separate.
+
 The club sandbox is connected and the core hosted dues flow works in staging. This is not a real-member or real-payment launch. A separate [native failure and recovery follow-up](./TEST_DUES_NATIVE_RECOVERY.md) records the later bounded checks and qualification limits.
 
 Officer impact: verified fictional payers can use $25 individual or $30 family test Checkout and activate automatically, then sign up for free events with separate event consent. No officer membership approval follows these checks.