Gateway contract

Every message that crosses a site goes through the gateway. The gateway holds three promises.

• Structured fields only. Notifications and emails are built from fields, never from text the sender wrote.
• Nothing approves by link. A link in a message can open a page. It can never approve a haul.
• Every haul ends in a receipt. A haul is done when its criteria pass inspection and the receipt is stored.

Handoff states

A handoff moves through these states in order: offered, accepted, working, submitted, inspected, closed.

A reviewer can also send a haul back, which returns it to working.