- • Two independent extractions: Anthropic Vision + Workers AI
- • Disagreement triggers admin flag
- • Agreement = high-confidence extraction
- • Audit trail preserves both outputs
- • review_queue is mandatory stop
- • /intake.html admin reviews + edits
- • preview→confirm with X-Edit-Token
- • No NS write without admin approval
- • Raw email always preserved in R2
- • Re-extract possible from raw
- • PushMutexDO prevents double-write
- • NS_PUSH_QUEUE retries with backoff
- • Parser fail → human-review queue with raw blob
- • No match → admin manually maps customer/item
- • NS push fail → DLQ + admin alert