[AdilAzhariOmsan]

This records two owner decisions made on 2026-11-04 before Phase 2 (Brand Identity and Design System), and resolves the contradiction they exposed. Documentation only: no application code, dependencies, configuration, migrations or generated files.

Summary

Decision 1: ADR-0020 is Accepted (it was Proposed).

 Platform administration                     Vendor dashboard
 /admin  · Filament (Livewire)               /vendor · Vue 3 + Inertia.js
 staff (platform_role) only                  vendor members (VendorContext)
+English only                               +en · ar (RTL) · ms
+uses Phase 2 design tokens
+delegates to use cases; never writes status or money directly
 Laravel 13 compatibility checked in Phase 3; Vue fallback retained

• The new Decision §6, surface separation, says vendors never use Filament (no panel, resource or tenancy). Both surfaces call the same use cases and policies.
• The new Decision §7, language, makes the admin English-only.
• The platform_role, permission-enum and VendorContext mechanisms come from ADR-0011, which stays Proposed. ADR-0020 says explicitly that they are not accepted until ADR-0011 is.
• Under ADR-0006, an accepted ADR's text is frozen, so these clarifications are added in the same change as the acceptance.

Decision 2: P-1 is approved. Checkout flow:

visitor ── browse, search, guest cart ──► start checkout
  ├─ sign in (verified) ─────────────────────────────────────► address → place → pay
  ├─ sign in (unverified) ─┐
  └─ register inline ──────┴─► verification prompt (resend) ─► follow signed link
                                                              └► back to checkout, same cart ─► place → pay
place / pay from a guest or unverified account → rejected before any write

• The guest cart merges at sign-in, including the automatic sign-in after registration.
• Nothing is reserved before placement, so verifying never uses up the reservation time.

Phase 1 briefing C7 is resolved. P-1's inline sign-up contradicted FR-ID-01's "redirected to verification". Verification is now a step inside checkout, and the signed link and its 60-minute lifetime are unchanged.

These C-numbers come from the Phase 1 decision briefing. They are not Phase 0's code findings C1–C6, and Addendum A says so.

Consistency (briefing C13). Because the admin is English-only, three statements that implied every page is translated are now scoped to the storefront and vendor dashboard: PRD §6.1, release gate 7 and NFR-I18N-01.

Files (9)

File	Change
docs/architecture/adr/0020-platform-administration-in-filament.md	Status Accepted; owner decision and rationale; §6 surface separation; §7 language; ADR-0011 dependency note
docs/architecture/README.md	ADR index: 0020 Accepted
docs/product/product-requirements.md	P-1 approved, as rules (a)–(f); §5 and §6.1 rows; gate 7; §9 open list
docs/product/functional-requirements.md	FR-ID-01 (registration, verification, resend, enforcement); FR-CART-02 (merge after registration); FR-CHK-01 (guest, unverified, server enforcement, resume, reservation)
docs/product/user-journeys.md	CJ-1: paths 4a–4d (existing verified, existing unverified, new, return after verification); 4 new failure branches
docs/architecture/adr/0015-checkout-and-payment-orchestration.md	§1: verified email required; step 1 (place) and step 2 (attempt) reject before any write
docs/architecture/security-model.md	§5: checkout route group (public entry; place and pay need auth + verified; use cases re-check)
docs/product/non-functional-requirements.md	NFR-I18N-01 scoped; admin English-only
docs/discovery/PHASE-1-REVIEW.md	Addendum A: decisions, C7 resolution, briefing-label note, what stays open

Evidence

Verified before committing:

• Scope:
  • 9 files changed, all under docs/;
  • 0 untracked files;
  • git diff --check is clean;
  • no CRLF line endings.
• Statuses:
  • ADR-0020 is Accepted, by owner decision (2026-11-04);
  • ADR-0011 is still Proposed, both in the ADR file and in the index;
  • no wording says ADR-0011 is accepted.
• Consistent enforcement: "verified before order submission and payment initiation" appears in P-1, FR-ID-01, FR-CHK-01, CJ-1, ADR-0015 §1 and security-model §5. FR-CART-02 covers only the cart merge.
• Verification link: "60 minutes" is unchanged in FR-ID-01, CJ-1 and Addendum A.
• Links: 121 relative links checked, 1 broken: marketplace-migration.md → ../REDESIGN_BRIEF.md. It was already broken before this PR:
  • the file is untouched on this branch;
  • the link exists on main;
  • the target is absent on main.

CI note

The PHP 8.5 / Laravel 13 job is expected to fail at composer audit. Five dependency advisories were published after main last passed CI. The fix is in #7, which is open with CI passing, and is waiting for a required review.

This PR touches only Markdown and deliberately does not work around that failure. Re-run CI here once #7 has merged.

Merge Danger

Door: two-way

Documentation only, so a revert restores the previous wording. The decisions themselves are owner approvals; reversing one would need a new ADR under ADR-0006.

Blast Radius: docs

There is no runtime effect. The change does steer Phase 2 scope (admin theming only, no admin RTL) and the Phase 3 checkout implementation.