# Recovery Path Evidence Record

**Author synthesis — proposed reviewer template. Not an industry standard, audit template, legal record, implementation or Treasury Desk product feature.**

## Empty template

### Case header
- Case ID:
- Purpose / reader job:
- Record schema version:
- Human disposition: `pending | closed | unresolved | escalated`
- Closure criterion version:
- Privacy class:
- Retention/access note:

### Logical payment
- Logical payment reference:
- Expected obligation/order/resource reference:
- Principal/mandate/scope decision reference:
- Currency/units:
- Payee/resource reference:
- Normalized non-sensitive argument snapshot/reference:
- Sensitive payload retained? `No` by default.

### Attempt records
Repeat for each attempt:
- Attempt ID:
- Provider-native payment/transaction ID:
- Request/correlation ID:
- Idempotency/client token reference:
- Provider / connector / account scope:
- API/schema/SDK/tool-adapter version:
- Environment/tenant:
- Operation ID/semantic name:
- Submitted-at timestamp + provenance:
- Response/observed-at timestamp + provenance:
- HTTP result:
- Tool/protocol envelope result:
- Provider-native state:
- Provider-native error code/message:
- Adapter/downstream code/message:
- Parameter/reference digest:
- Retry parent/child relationship:
- Retry layer (`client | SDK | orchestrator | provider | webhook`):
- Evidence references:

### Asynchronous evidence
Repeat for each event:
- Event/callback ID:
- Related provider object/payment ID:
- Event type/native state:
- Event time:
- Observed time:
- Authenticity verification evidence/reference:
- Deduplication identity:
- Processing result:
- Source/version:
- Does it conflict with another record?:
- Evidence reference:

### Lookup / reconciliation evidence
- Lookup ID:
- Lookup key and exact scope:
- Result:
- Observation timestamp:
- Completeness/scope caveat:
- Provider ledger/report reference:
- Settlement evidence reference:
- Finance reconciliation reference:

### Retry and failover history
- Retry policy source/version:
- Attempt budget/deadline:
- Backoff/hint:
- Same intent confirmed?:
- First-provider outcome resolved before failover?:
- Human decision reference for any exception:
- Residual duplicate/side-effect risk:

### Compensation child records
Repeat:
- Recovery child ID:
- Type (`cancel request | confirmed cancellation | void | refund | reversal | other`):
- Parent payment/attempt:
- Authority/scope reference:
- Preconditions:
- Requested at:
- Provider-native state:
- Outcome evidence:
- Reconciliation evidence:
- Still unresolved?:

### Contradictions and unknowns
- Contradiction ID:
- Source A:
- Source B:
- Safe current conclusion:
- Missing evidence:
- Owner / escalation:
- Next review trigger:

### Closure
- Closure criterion:
- Evidence meeting criterion:
- Residual limits:
- Human disposition:
- Disposition timestamp:
- Disposition reason (brief and observable):
- Records intentionally excluded (secrets/full private payloads/hidden reasoning):

---

## Filled synthetic example — CASE-SYN-01

### Case header
- Case ID: `CASE-SYN-01`
- Purpose: reconstruct a timeout after dispatch without assuming failure or creating a second payment.
- Record schema version: `RP-ER-0.1`
- Human disposition: `unresolved`
- Closure criterion version: `CC-SYN-1`
- Privacy class: Green synthetic
- Access/retention: local fixture only; no credentials.

### Logical payment
- Logical payment reference: `LP-01`
- Expected obligation: `ORDER-OPAQUE-01`
- Scope decision: `DEC-OPAQUE-01`
- Currency/units: `CUR-X`, 4200 minor units
- Payee/resource: `PAYEE-REF-A`
- Normalized arguments: `ARGREF-01`
- Sensitive payload retained: No

### Attempt `ATT-01-01`
- Provider-native transaction ID: unknown
- Request/correlation ID: `REQ-01`
- Idempotency reference: `IDEMP-01`
- Provider/account scope: `PROVIDER-A / ACCOUNT-OPAQUE`
- Contract/version: `SRC-CONTRACT-A@2026.09`
- Operation: `payments.create`
- Submitted: `2026-09-14T10:00:00Z` / fixture clock
- Observed: `2026-09-14T10:00:05Z`
- HTTP result: no response; timeout
- Tool envelope: transport exception
- Provider-native state: unknown
- Error: local timeout observation only
- Retry relation: none
- Evidence: `OBS-01`, `ARGREF-01`

### Lookup
- Lookup ID: `LOOKUP-01`
- Key/scope: `REQ-01` in `ACCOUNT-OPAQUE`
- Result: no matching object in fixture snapshot
- Scope caveat: the fixture explicitly marks this lookup as incomplete for downstream provider processing.
- Settlement/reconciliation: none.

### Retry/failover
- Additional economic attempt: none.
- Reviewer rule: gather more evidence or escalate; do not translate timeout + incomplete lookup into failure.
- First-provider outcome resolved: No.
- Failover: Not authorized.

### Contradiction/unknown
- Safe conclusion: `UNKNOWN_OUTCOME`.
- Missing evidence: authoritative provider object/event/ledger or a documented statement that original request was never applied.
- Owner: synthetic payment-ops reviewer.

### Closure
- Criterion not met.
- Human disposition: `unresolved`.
- Brief reason: no evidence establishes success or failure.