User flagged: a buyer's cart can span multiple sellers, so 'per-(buyer, seller)' isn't really 1:1. The right framing is per-Payment: Amanat already creates N Payment records for an N-seller cart (one per sellerOfferId), and each gets its own derived destination + RN intent + buyer-side approve+pay tx pair. PRD now explicitly: - Recommends per-Payment keying (which collapses to per-(buyer, sellerOfferId) via the existing uniq_pending_request_network_by_buyer_session index) - Documents the multi-seller cart UX (N approve+pay pairs in sequence, with clear progress indicator, mid-cart abandonment is fine) - Notes RN's ERC20FeeProxy is single-destination by design (no atomic split in v1; future Amanat splitter contract is out of scope) - Updates open questions to monotonic derivation counter, immediate sweep, single-use addresses (no rotation), and cold-payment recovery - Scope explicitly mentions cart-aware buyer UX as part of task #7 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
51 KiB
51 KiB