Financial-state correctness under retries, replays, and cross-team workflow edges.
Transactional workflow backends
Explicit DB transactions for lending and internal writes
Blocks half-applied balances or approval state on retries, re-runs, live lending.
Versioned REST contracts for risk and operations handoffs
Staged rollbacks on contract drift; downstream not forced in lockstep.
One authorization model across APIs and admin
Same policy on public routes and internal tools—no cross-channel drift.