Wallet failure drills

Before production, prove operator flow handles non-happy wallet outcomes safely.

Debit failure drill

Expected result:

• debit operation -> failed
• order -> failed
• no AMM trade created
• webhook failure event emitted

Observed staging mode name in simulator runbook:

• fail_debit

Debit unknown drill

Expected result:

• debit operation -> unknown
• order -> manual_review
• no AMM trade executed until resolution
• failure or manual-review webhook evidence present

Observed staging mode name:

• unknown_debit

Credit failure drill

Expected result:

• payout-side balance operation -> failed
• redemption or sell item -> manual_review
• operator must inspect before any replay or retry decision

Observed staging mode name:

• fail_credit

Credit unknown drill

Expected result:

• payout-side balance operation -> unknown
• redemption or sell item -> manual_review
• lookup endpoint and human review required

Observed staging mode name:

• unknown_credit

What to capture for each drill

• idempotency_key
• order or redemption item ID
• balance operation ID
• final status
• failure reason
• webhook event ID if emitted

Pass criteria

• no duplicate debit or credit side effect
• unknown always escalates to lookup or manual review
• operator team can explain exact next step for each failure state