Record native dues failure and recovery verification

GITHUB_ISSUES.md

@@ -1,6 +1,6 @@
 # GitHub Issue Backlog: Secure Commerce Program
 
-**Test annual dues — October 17, 2026, core hosted flow verified in staging:** the club sandbox, two isolated dues Functions and matching test screen are connected at `71f59e2`. Actual $25 individual/$30 family test Checkout activated each payer automatically; unpaid cancel/resume, duplicate webhook delivery, free-event admission, phone layout, failed-read recovery and access denials passed. Disposable accounts/event were removed; payment evidence was retained. [Dated evidence and remaining qualification](./docs/TEST_DUES_HOSTED_EVIDENCE.md), [officer review](./docs/officers/TEST_DUES.md). #742 remains open for the explicitly listed native failure-path checks. Real payments, production membership, family invitation enrollment and final club policies remain unavailable. Earlier checkpoints below are historical.
+**Test annual dues — October 17, 2026, core and bounded native recovery verified in staging:** the club sandbox and test screen remain at application source `71f59e2`. In addition to the [core hosted checks](./docs/TEST_DUES_HOSTED_EVIDENCE.md), fresh native caller/Auth, concurrency, lost-response, missed-callback, mismatch, refund/hold, old-year and failed-card/expiration checks passed within the [dated qualification limits](./docs/TEST_DUES_NATIVE_RECOVERY.md). Eight new fictional accounts were removed; payment evidence was retained and the test webhook restored. [Officer review](./docs/officers/TEST_DUES.md). Real payments, production membership, family invitations and final club policies remain unavailable. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

IMPLEMENTATION_PLAN.md

@@ -1,6 +1,6 @@
 # MPRC Secure Commerce Implementation Plan
 
-**Test annual dues — October 17, 2026, core hosted flow verified in staging:** the club sandbox, two isolated dues Functions and matching test screen are connected at `71f59e2`. Actual $25 individual/$30 family test Checkout activated each payer automatically; unpaid cancel/resume, duplicate webhook delivery, free-event admission, phone layout, failed-read recovery and access denials passed. Disposable accounts/event were removed; payment evidence was retained. [Dated evidence and remaining qualification](./docs/TEST_DUES_HOSTED_EVIDENCE.md), [officer review](./docs/officers/TEST_DUES.md). #742 remains open for the explicitly listed native failure-path checks. Real payments, production membership, family invitation enrollment and final club policies remain unavailable. Earlier checkpoints below are historical.
+**Test annual dues — October 17, 2026, core and bounded native recovery verified in staging:** the club sandbox and test screen remain at application source `71f59e2`. In addition to the [core hosted checks](./docs/TEST_DUES_HOSTED_EVIDENCE.md), fresh native caller/Auth, concurrency, lost-response, missed-callback, mismatch, refund/hold, old-year and failed-card/expiration checks passed within the [dated qualification limits](./docs/TEST_DUES_NATIVE_RECOVERY.md). Eight new fictional accounts were removed; payment evidence was retained and the test webhook restored. [Officer review](./docs/officers/TEST_DUES.md). Real payments, production membership, family invitations and final club policies remain unavailable. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

OFFICER_START_HERE.md

@@ -1,6 +1,6 @@
 # MPRC Website: Officer Start Here
 
-**Test annual dues — October 17, 2026, core hosted flow verified in staging:** the club sandbox, two isolated dues Functions and matching test screen are connected at `71f59e2`. Actual $25 individual/$30 family test Checkout activated each payer automatically; unpaid cancel/resume, duplicate webhook delivery, free-event admission, phone layout, failed-read recovery and access denials passed. Disposable accounts/event were removed; payment evidence was retained. [Dated evidence and remaining qualification](./docs/TEST_DUES_HOSTED_EVIDENCE.md), [officer review](./docs/officers/TEST_DUES.md). #742 remains open for the explicitly listed native failure-path checks. Real payments, production membership, family invitation enrollment and final club policies remain unavailable. Earlier checkpoints below are historical.
+**Test annual dues — October 17, 2026, core and bounded native recovery verified in staging:** the club sandbox and test screen remain at application source `71f59e2`. In addition to the [core hosted checks](./docs/TEST_DUES_HOSTED_EVIDENCE.md), fresh native caller/Auth, concurrency, lost-response, missed-callback, mismatch, refund/hold, old-year and failed-card/expiration checks passed within the [dated qualification limits](./docs/TEST_DUES_NATIVE_RECOVERY.md). Eight new fictional accounts were removed; payment evidence was retained and the test webhook restored. [Officer review](./docs/officers/TEST_DUES.md). Real payments, production membership, family invitations and final club policies remain unavailable. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

OPERATIONS_RUNBOOK.md

@@ -1,6 +1,6 @@
 # MPRC Platform Operations Runbook
 
-**Test annual dues — October 17, 2026, core hosted flow verified in staging:** the club sandbox, two isolated dues Functions and matching test screen are connected at `71f59e2`. Actual $25 individual/$30 family test Checkout activated each payer automatically; unpaid cancel/resume, duplicate webhook delivery, free-event admission, phone layout, failed-read recovery and access denials passed. Disposable accounts/event were removed; payment evidence was retained. [Dated evidence and remaining qualification](./docs/TEST_DUES_HOSTED_EVIDENCE.md), [officer review](./docs/officers/TEST_DUES.md). #742 remains open for the explicitly listed native failure-path checks. Real payments, production membership, family invitation enrollment and final club policies remain unavailable. Earlier checkpoints below are historical.
+**Test annual dues — October 17, 2026, core and bounded native recovery verified in staging:** the club sandbox and test screen remain at application source `71f59e2`. In addition to the [core hosted checks](./docs/TEST_DUES_HOSTED_EVIDENCE.md), fresh native caller/Auth, concurrency, lost-response, missed-callback, mismatch, refund/hold, old-year and failed-card/expiration checks passed within the [dated qualification limits](./docs/TEST_DUES_NATIVE_RECOVERY.md). Eight new fictional accounts were removed; payment evidence was retained and the test webhook restored. [Officer review](./docs/officers/TEST_DUES.md). Real payments, production membership, family invitations and final club policies remain unavailable. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

SECURITY.md

@@ -1,6 +1,6 @@
 # MPRC Security, Privacy, and Risk Plan
 
-**Test annual dues — October 17, 2026, core hosted flow verified in staging:** the club sandbox, two isolated dues Functions and matching test screen are connected at `71f59e2`. Actual $25 individual/$30 family test Checkout activated each payer automatically; unpaid cancel/resume, duplicate webhook delivery, free-event admission, phone layout, failed-read recovery and access denials passed. Disposable accounts/event were removed; payment evidence was retained. [Dated evidence and remaining qualification](./docs/TEST_DUES_HOSTED_EVIDENCE.md), [officer review](./docs/officers/TEST_DUES.md). #742 remains open for the explicitly listed native failure-path checks. Real payments, production membership, family invitation enrollment and final club policies remain unavailable. Earlier checkpoints below are historical.
+**Test annual dues — October 17, 2026, core and bounded native recovery verified in staging:** the club sandbox and test screen remain at application source `71f59e2`. In addition to the [core hosted checks](./docs/TEST_DUES_HOSTED_EVIDENCE.md), fresh native caller/Auth, concurrency, lost-response, missed-callback, mismatch, refund/hold, old-year and failed-card/expiration checks passed within the [dated qualification limits](./docs/TEST_DUES_NATIVE_RECOVERY.md). Eight new fictional accounts were removed; payment evidence was retained and the test webhook restored. [Officer review](./docs/officers/TEST_DUES.md). Real payments, production membership, family invitations and final club policies remain unavailable. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

STRIPE_COMMERCE_DESIGN.md

@@ -1,6 +1,6 @@
 # Stripe, Race Registration, and Merchandise Design
 
-**Test annual dues — October 17, 2026, core hosted flow verified in staging:** the club sandbox, two isolated dues Functions and matching test screen are connected at `71f59e2`. Actual $25 individual/$30 family test Checkout activated each payer automatically; unpaid cancel/resume, duplicate webhook delivery, free-event admission, phone layout, failed-read recovery and access denials passed. Disposable accounts/event were removed; payment evidence was retained. [Dated evidence and remaining qualification](./docs/TEST_DUES_HOSTED_EVIDENCE.md), [officer review](./docs/officers/TEST_DUES.md). #742 remains open for the explicitly listed native failure-path checks. Real payments, production membership, family invitation enrollment and final club policies remain unavailable. Earlier checkpoints below are historical.
+**Test annual dues — October 17, 2026, core and bounded native recovery verified in staging:** the club sandbox and test screen remain at application source `71f59e2`. In addition to the [core hosted checks](./docs/TEST_DUES_HOSTED_EVIDENCE.md), fresh native caller/Auth, concurrency, lost-response, missed-callback, mismatch, refund/hold, old-year and failed-card/expiration checks passed within the [dated qualification limits](./docs/TEST_DUES_NATIVE_RECOVERY.md). Eight new fictional accounts were removed; payment evidence was retained and the test webhook restored. [Officer review](./docs/officers/TEST_DUES.md). Real payments, production membership, family invitations and final club policies remain unavailable. Earlier checkpoints below are historical.
 
 **#731 fictional native acceptance — 2026-10-14:** actual signup, full fictional credit return, same-bib recipient transfer, revoke and original credit ownership passed in staging. Native committed/lost-response retry preserved one seat/receipt/audit, did not resurrect cancellation and could not bypass current authority. [Proof and supervised gate](./docs/officers/STAGING_COMMUNITY.md#fictional-race-member-screen--731-source-prepared). These integer-credit simulations are not provider-backed payment/refund evidence; no real policy, finance authorization, Stripe object or production launch changed. Complete acceptance/cleanup receipt and fresh fake fixtures remain prerequisites; earlier #731/#732 source-only notes below are historical.
 

SYSTEM_DESIGN.md

@@ -1,6 +1,6 @@
 # MPRC Platform System Design
 
-**Test annual dues — October 17, 2026, core hosted flow verified in staging:** the club sandbox, two isolated dues Functions and matching test screen are connected at `71f59e2`. Actual $25 individual/$30 family test Checkout activated each payer automatically; unpaid cancel/resume, duplicate webhook delivery, free-event admission, phone layout, failed-read recovery and access denials passed. Disposable accounts/event were removed; payment evidence was retained. [Dated evidence and remaining qualification](./docs/TEST_DUES_HOSTED_EVIDENCE.md), [officer review](./docs/officers/TEST_DUES.md). #742 remains open for the explicitly listed native failure-path checks. Real payments, production membership, family invitation enrollment and final club policies remain unavailable. Earlier checkpoints below are historical.
+**Test annual dues — October 17, 2026, core and bounded native recovery verified in staging:** the club sandbox and test screen remain at application source `71f59e2`. In addition to the [core hosted checks](./docs/TEST_DUES_HOSTED_EVIDENCE.md), fresh native caller/Auth, concurrency, lost-response, missed-callback, mismatch, refund/hold, old-year and failed-card/expiration checks passed within the [dated qualification limits](./docs/TEST_DUES_NATIVE_RECOVERY.md). Eight new fictional accounts were removed; payment evidence was retained and the test webhook restored. [Officer review](./docs/officers/TEST_DUES.md). Real payments, production membership, family invitations and final club policies remain unavailable. Earlier checkpoints below are historical.
 
 **Member-screen staging checkpoint — #739, October 16, 2026:** Function v7 and Hosting source `799565e` are verified, including the downloaded archive, all 62 website files, genuine Auth/App Check and ten member/retry/expiry/cancellation checks with fresh fictional fixtures and verified cleanup. Full-site screenshots exposed a fixed-header style collision on the member navigation. The navigation correction is now published at `d08a6a3`; all 62 final assets, four deep routes, genuine sign-in, desktop/390px navigation/focus and fresh cleanup passed in [closed #739](https://github.com/Run-MPRC/Run-MPRC.github.io/issues/739). Function v7 remains unchanged. Online dues and real membership/payments remain unavailable. [Officer review](./docs/officers/MEMBER_SCREEN.md).
 

docs/TEST_DUES_ENGINEERING.md

@@ -1,6 +1,6 @@
 # Test-only annual dues runtime — #742
 
-This bounded staging integration consumes `membershipDuesCheckout`, `membershipDuesPayment` and `membershipAuthority`. It is isolated in `duesTestOnly.js`; neither legacy `index.js` nor `communityOnly.js` imports it. The [October 17 specialist release](./TEST_DUES_RELEASE.md) connected the club sandbox and deployed both isolated Functions plus matching Hosting. The [dated native evidence](./TEST_DUES_HOSTED_EVIDENCE.md) separates verified core behavior from remaining native failure-path qualification. Existing member/event records remain compatible; no migration or roster import.
+This bounded staging integration consumes `membershipDuesCheckout`, `membershipDuesPayment` and `membershipAuthority`. It is isolated in `duesTestOnly.js`; neither legacy `index.js` nor `communityOnly.js` imports it. The [October 17 specialist release](./TEST_DUES_RELEASE.md) connected the club sandbox and deployed both isolated Functions plus matching Hosting. The [dated native evidence](./TEST_DUES_HOSTED_EVIDENCE.md) and [native failure/recovery follow-up](./TEST_DUES_NATIVE_RECOVERY.md) separate core proof, actual provider failures, injected cases and remaining qualification limits. Existing member/event records remain compatible; no migration or roster import.
 
 ## Trust and transitions