How it stays safe
OrderForge turns one vague custom-order request into an order the customer approved on PayPal and the shop confirmed. This page explains what goes wrong when a small shop does that by email or chat, and the two rules the product is built around.
The problem
Shops that sell custom or small-batch orders, such as gift boxes, event kits and merch, usually agree a price in a message thread. Then a customer has to trust that the price they agreed is the price they pay, that the shop can really make what was promised, and that they will be charged once.
Three things that go wrong
The price changes after the customer agreed
A number is retyped, an item is swapped, and the customer pays something they never saw.
What OrderForge does: The customer accepts one exact version of the price. PayPal sets money aside for that version only. If anything changes, it is a new price and needs a new yes.
The customer pays for something the shop cannot make
Stock is checked by hand, or not at all, and the last bottle is sold twice.
What OrderForge does: Stock is checked by the system, not by the assistant, and the items are held while the customer pays. When an item runs out at the quantity asked for, the system says so and suggests another item.
The customer is charged twice
A page reloads, a request runs out of waiting time, a button is pressed again.
What OrderForge does: Every request to PayPal carries a fixed reference, so a retry repeats nothing. After a timeout the system asks PayPal what happened before it tries again, and one order makes one preparation sheet.
The two rules
The assistant never touches the money
The assistant reads the request, asks only the questions the system says it needs, and suggests a box. The system checks every box against the catalog and the stock and works out every price in whole cents. A price, quantity or status written by the assistant is not accepted anywhere.
PayPal is tied to one exact price
When the customer approves, they are not charged yet. PayPal sets the money aside and the shop reviews the order. Only if the shop accepts is the customer charged. If the shop says no, the hold disappears.
Check it yourself
Each rule above is covered by named tests, and the runs that used the real PayPal sandbox and a real model are written up separately. The proof file lists exactly what was run, on which version, and how each result is labeled. We make no claim about speed, demand or accuracy.