The system after payment
An order is more than a successful payment screen. Inventory, invoicing, shipping and returns are handled through recorded state transitions.
When a connection fails
Provider delays or repeated notifications must not produce new orders. Queues, retries and visible operational error handling are needed.