Recipe: Chargeback handling workflow

Automated response pipeline for payment disputes via SellAuth webhooks.

1. Webhook intake

SellAuth fires a chargeback.created event. Meridian verifies the HMAC signature, extracts the dispute ID, and enqueues a processing job.

2. License freeze

The user's KeyAuth license is immediately suspended. All active sessions are revoked. A freeze record is written to Upstash KV with a 90-day TTL for audit.

3. Evidence assembly

Meridian gathers the original transaction receipt, IP logs, hardware fingerprint history, and download timestamps. These are bundled into a PDF and attached to the dispute response via the SellAuth API.

4. Discord alert

A structured embed is posted to the #disputes channel with user ID, dispute reason code, and a one-click link to the SellAuth dashboard for manual review.

5. Resolution webhook

On chargeback.won the license remains revoked and the user is permanently banned. On chargeback.lost the license is reinstated and the freeze record is cleared.

Note: All chargeback events are logged to a dedicated Upstash KV namespace with 180-day retention for compliance.