feat(checkout): EU refund window (30 min)

.github/workflows/ci.yml

@@ -0,0 +1,19 @@
+name: Unit tests (checkoutservice)
+on:
+  pull_request:
+    branches: ["**"]
+jobs:
+  go:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with: { go-version: "1.22" }
+      - name: Test checkoutservice
+        run: |
+          cd src/checkoutservice
+          go test ./... -coverprofile=cover.out
+      - uses: actions/upload-artifact@v4
+        with:
+          name: coverage-checkout
+          path: src/checkoutservice/cover.out

docs/contracts/checkout/refund.yaml

@@ -0,0 +1,6 @@
+endpoint: POST /api/refund
+request:
+  fields: [order_id]
+response:
+  fields: [eligible:boolean, reason?:string]
+notes: "No PII in request or logs. Authorization context supplies customer_id."

docs/requirements/req-eu-refund-30m.md

@@ -0,0 +1,8 @@
+---
+id: req://checkout/refund-window/v1
+title: EU Refund Window – 30 minutes
+tags: [domain:payments, region:EU, pii:false, nfr:latency-p95<=200ms]
+owner: team-checkout
+---
+EU customers may cancel an order and receive a refund within 30 minutes of purchase.
+Do not log PII (email/phone/card) during eligibility checks.

src/checkoutservice/policy/capsule.yaml

@@ -0,0 +1,15 @@
+capsule_id: P-101
+applies_to: ["service://boutique/checkoutservice"]
+rules:
+  - id: sec.pii.logs
+    expr: "no_log_fields in ['email','phone','card_number']"
+    severity: critical
+    waiver_allowed: false
+  - id: test.coverage
+    expr: "statement>=0.80 && branch>=0.70"
+    severity: medium
+    waiver_allowed: true
+  - id: feature.refund_window
+    expr: "env['REFUND_WINDOW_MINUTES'] == '30' || feature_flag('CHECKOUT_EU_REFUND_ENABLED') == 'true'"
+    severity: high
+    waiver_allowed: true