Persistent cart
verifiedWorkspace-scoped cart persistence, 15-minute inactivity TTL, quote-token validation and add/remove/clear operations.
Quote integrity
verifiedCart items snapshot the quoted price, currency, domain, action and term. Expired or cross-workspace quotes are rejected.
Paid checkout
blockedPOST /api/checkout/create-session remains gated by live payment configuration, release approval and webhook-backed reconciliation. The legacy payment route remains retired.