chrismdp / counting-house-rung-5-transactFernwick Air: rebook after a missed connection, tier transactPublic · Version 1 of 1ForkWho may see each partWhere each part runsYAMLChecksNo mistakestokenisedFernwick staffopsFernwick staffthe messagethe messagetokens only, under Fernwick'sdata rule · loosens no companyto anthropic only[within the policy row]each reply sentthe write intent[refused] the reason code[refused][eligible][under the cap][within limits]each rebooking, with how toundo it[over the cap][yes]the clerk's suggestionsthe reply sentthe rebooking madetokens only, under Fernwick'sdata rule · loosens no companyto anthropic onlythe scoreTrigger · untrustedA customer writes in: rebookme after a missed connectionConnection · untrustedFernwick's contact centre:email and chatConnectionFernwick's booking system,liveCode · bring-inPII gateway: swap names,booking references andcontact details for tokensDataThe PII vault: the real valuebehind each tokenDataThe tokenised caseDataThe intent's SOP and policyrowConnectionFlight status and seats, readonly, through the MCPgatewayAI · draftThe clerk drafts a reply and awrite intent for the rebookingDataThe clerk's answerCode · doPII gateway: swap the realvalues back into the clerk'sanswerSurfaceThe rep's case screenCode · checkOrchestrator: pass on only thewrite intent's bookingreference and new flight, oncethey match its schema and thelive booking system shows thebooking is this customer's, theconnection was missed andthe seat is freeSurfaceThe exception queue, byreason codeCode · doOrchestrator: run therebooking saga once peridempotency key, readingback each write and undoingevery step if one failsPerson · standing approvalCustomer ops' standingapproval: same-cabinrebookings, fare difference upto 200 pounds eachSurfaceEach rebooking made underthe cap, with how to undo itPerson · reviewA supervisor's yes to the exactrebooking, over the capPerson · doA rep rebooks the passenger,if eligibleOutside actionRebook the passengerAskThe new itinerary goes to the customer from the booking system when the ticket is reissued, as one of the saga's stepsCode · doPII gateway: swap the realvalues back into the clerk'sreply and send itPerson · standing approvalCX and legal's standingapproval: replies on this intentonly, risk accepted on theOctober scored set(judge-graded exam abovethe human baseline)Person · doThe rep replies to thecustomerOutside actionReply to the customerAskSurfaceEach reply the clerk sent, forQA to sampleCode · bring-inPII gateway: tokenise whatwas sent and doneDataWhat was sent and done,tokenisedAI · checkThe judge scores the clerk'sanswer against what was sentand done, by the intent'srubricCode · doRecord the scoreDataThe intent's scores, forpromotionFlow only+−Fit