# Synthetic Launch Evidence Ledger Example

This worked example uses a fictional app called Booking Desk. It is not a customer review, testimonial, qualified-demand event, or revenue event.

## Project details

- Project: Booking Desk
- Snapshot or release: synthetic-release-0.3
- Environment: production-like staging and isolated restore environment
- Review date: 2026-08-04
- Reviewer: JustHandled Labs internal example

## Evidence ledger

| Claim ID | Launch claim | Consequence if wrong | Evidence and reproduction | Observed result | Status | Next action |
|---|---|---|---|---|---|---|
| BOOKING-01 | A visitor can create a booking and receive a confirmation. | The main customer workflow fails. | Created a test booking, reloaded the private dashboard, and compared the stored time and confirmation ID. | The booking persisted and the IDs matched. | PASS | Retain the test receipt with the release. |
| AUTH-01 | One customer cannot read another customer's booking. | Private booking data may cross account boundaries. | Ran a two-account check on the booking view. The export path was not included. | The view denied cross-account access, but the full claim was not tested. | REVIEW | Test the export path with two non-production accounts. |
| PAY-01 | A repeated payment webhook does not create a duplicate booking. | A retry may duplicate a booking or mutate payment state twice. | No sanitized webhook retry receipt or repeatable test was supplied. | The retry path could not be examined. | CANNOT_ASSESS | Supply a safe non-production retry receipt or test. |
| RESTORE-01 | The booking service can be restored within 30 minutes. | Recovery may exceed the declared target. | Restored a pinned backup, ran a smoke check, and recorded elapsed time. | Restore took 47 minutes and the runbook omitted uploaded assets. | FAIL | Correct the runbook and repeat the timed drill. |

## Decision notes

- The critical booking workflow has direct evidence.
- The account-boundary claim is broader than the test that was run.
- Payment retry behavior remains unknown.
- The declared restore target failed.

This ledger does not approve a launch or certify security, privacy, accessibility, legal, or compliance work.