Provider command safety queue

Telegram and WhatsApp commands can create audited review items, but protected POS cashier actions still require button-only workflow, manager approval and audit evidence.

Queue statusProviders: 2Commands: 5Risk actions: 4Blocked: 2

WhatsApp coveredtrue

Telegram coveredtrue

Auditedtrue

Manager approvaltrue

Button-only POStrue

No POS mutationtrue

No dropdown/tabtrue

No LAN blockingtrue

Provider lanes

whatsapp2 commands

Manager review: 1Blocked: 0

telegram3 commands

Manager review: 3Blocked: 2

Safety decisions

provider_cmd_whatsapp_discount_001queued_for_manager_review

APPLY_DISCOUNTaudit_provider_command_001

Provider message can prepare a review item, but cashier discount still requires POS button workflow and manager approval.

provider_cmd_telegram_refund_002blocked_provider_direct_mutation

REFUND_PAYMENTaudit_provider_command_002

Refund command is recorded for audit and blocked from direct execution because cashier refund is a protected risk action.

provider_cmd_telegram_cash_drawer_003queued_in_local_hub

OPEN_CASH_DRAWERaudit_provider_command_003

Open cash drawer is queued locally for manager review and cannot be triggered directly from a provider chat.

provider_cmd_whatsapp_support_note_004support_note_only

support_noteaudit_provider_command_004

Customer message becomes a support note only; it cannot silently edit the order or delivery route.

provider_cmd_telegram_unverified_005blocked_unverified

VOID_ITEMaudit_provider_command_005

Unverified provider command is blocked before approval guard or POS workflow receives it.