> Historical note from the supplied ZIP. Current findings: `142-REQUIREMENT-AUDIT.md` and `CONSOLIDATED-VERIFICATION.md`.

# Order self-service implementation

Added authenticated customer and private-token guest tracking, cancellation limited to new/confirmed orders, transactional stock restoration, commission reversal and status history. Apply migration 000007 after prior migrations. No live MySQL integration has been run. Customer order links are bearer credentials and must not be exposed in analytics or referrers; deploy HTTPS and set a restrictive Referrer-Policy. Cancelling a coupon order does not currently restore coupon usage and requires follow-up. Admin status changes are not yet recorded in the new event table.