Canonical source
MemberConsole is designed to remain the authoritative commerce record for connected orders while merchant systems receive signed events and scoped API access to their own records.
Reconciliation
Use canonical order IDs and event IDs to reconcile fulfillment, CRM, ERP, support, or analytics systems without treating a copied row as the primary payment or order authority.
Authorization
Merchant identity should come from authenticated server context. Do not accept a browser-provided merchant ID as permission to read another merchant's data.