Quick rules (must follow)
Quality control: Do not allow CSC activation without post_office_code.
Evidence-first: When a dispute occurs, collect booking_reference and screenshots before escalation.
Audit discipline: Run audits and store JSON with timestamp before proposing operational changes.