Every order bug we have inherited traces back to the same thing: transitions living as if-chains across three services, so nobody can answer "who could move it here, and when."
We declare states, guards and hooks as data, so the machine applies the trigger or refuses with a reason, and every applied transition lands in append-only history. You probably already know where your order logic sits. https://shipmindlabs.com/c/6ed94e2d