Integration Recovery

Backlog field	Value
Story ID	CTRL-009
Epic	Cross Cutting Controls
Story type	Integration control
Review status	Draft - business analyst and business owner review required
Source evidence	ETA/ZATCA, marketplace, notifications, public APIs, integration events, external identifiers
Last source review	2026-07-10

As an integration operator, I want external requests, responses, retries, and failures traceable so that recovery does not duplicate ERP or authority transactions.

ERP posting and external submission states remain separate. Stable source/external IDs prevent duplicates. Retryable and terminal failures are distinguishable. Manual recovery is permissioned and audited.