WP-HARDEN-001 · Slice B · Increment 3

External API Safe Failure Boundary

Acceptance baseline

This diagnostic triggers a controlled authority failure using non-existent canonical identities. It must not create commerce state.

Runtime acceptance tokenExternal API token

Public failure proof

An unexpected authority failure must return only a stable public code plus correlation identity. Internal database/provider detail must stay private.