{
  "schemaVersion": 1,
  "provenance": "Controlled reference project — not client work",
  "referenceProject": true,
  "clientWork": false,
  "runId": "REF-RUN-20261021110526439",
  "defects": [
    {
      "id": "REF-BUG-001",
      "title": "Saved test card blocks checkout with HTTP 503",
      "severity": "High",
      "status": "Open",
      "seeded": true,
      "provenance": "Controlled reference project — not client work",
      "rationale": "A supported checkout method cannot complete an order. New-card checkout remains available; no financial loss or data exposure was established in this controlled test.",
      "linkedCaseIds": [
        "REF-010"
      ],
      "expected": "HTTP 201 with order confirmation and exactly one order for the valid saved test card.",
      "actual": "HTTP 503; SAVED_CARD_TOKEN_MISSING; Saved card authorization failed. The order was not placed. Order count: 0.",
      "reproductionSteps": [
        "Start the local reference app using the documented runner or server helper.",
        "Use Shopper, quantity 1, address 10 Reference Lane, and postal code 10001.",
        "Select Saved test card ending 4242.",
        "Click Place test order. Observe HTTP 503, an error message, and zero orders."
      ],
      "logs": [
        {
          "level": "network",
          "message": "POST /api/orders → HTTP 503"
        },
        {
          "level": "error",
          "message": "Failed to load resource: the server responded with a status of 503 (Service Unavailable)"
        },
        {
          "level": "info",
          "message": "Reference checkout result {\"status\":503,\"code\":\"SAVED_CARD_TOKEN_MISSING\",\"message\":\"Saved card authorization failed. The order was not placed.\",\"referenceSeededDefect\":\"REF-BUG-001\"}"
        },
        {
          "level": "assertion",
          "message": "A valid saved test card should authorize and create an order.\n\n503 !== 201\n"
        }
      ],
      "screenshots": [
        "/assets/proof/reference/screenshots/REF-010.png"
      ],
      "source": "/assets/proof/reference/source/server.mjs",
      "seedExplanation": "The local server deliberately returns SAVED_CARD_TOKEN_MISSING for saved-card payment to demonstrate a real failed assertion and traceable evidence."
    }
  ]
}