{
  "example_id": "logistics--driver-expense-reimbursements",
  "ledger_model": "payable",
  "entry_parameter_rules": {
    "driver_expense_reimbursements_fund": {
      "positive_integer_parameters": ["amount"]
    },
    "driver_expense_reimbursements_approve": {
      "positive_integer_parameters": ["amount"]
    },
    "driver_expense_reimbursements_cancel_approval": {
      "positive_integer_parameters": ["amount"]
    },
    "driver_expense_reimbursements_reserve_payout": {
      "positive_integer_parameters": ["amount"]
    },
    "driver_expense_reimbursements_payout_settled": {
      "positive_integer_parameters": ["amount"]
    },
    "driver_expense_reimbursements_payout_failed": {
      "positive_integer_parameters": ["amount"]
    }
  },
  "application_obligations": [
    "Authenticate and authorize every source, case and payee; bind them to one confirmed tenant and test ledger.",
    "Use opaque identifiers; never put patient, claimant or other sensitive details in account paths.",
    "Enforce positive/nonnegative integer rules before posting; the schema alone does not reject every negative parameter.",
    "Keep one immutable command record and deterministic idempotency key per business operation; reject key reuse with changed payload.",
    "Match callbacks to the exact case, source, payee, reservation and provider sub-operation; a balance condition is not identity authorization.",
    "Validate accepted service, compensation, refund and fee amounts against domain records; terminal outcomes must not be reopened.",
    "For partial outcomes, store each exact confirmed external sub-operation and ensure its amount is consumed at most once.",
    "Persist intent/outbox before effects; unknown provider outcome stays reserved until reconciled. Never release funds merely because a request timed out.",
    "Use only confirmed incoming cash for fund; record outgoing cash only after confirmed settlement.",
    "Reconcile the manually modeled cash account to external payment records. These schemas have no linked-account reconciliation integration."
  ],
  "domain_trigger": "An operator approves a driver reimbursement claim",
  "domain_boundary": "Receipt verification and payroll treatment are external"
}