Safe Writes

Current public writes are:

Write	Scope	Important boundary
Create/update customer	customers.write	Contact DTO only
Create/update product and category	catalog.write	Simple catalog fields only
Adjust inventory	inventory.write	Absolute target through immutable ledger
Create draft order	orders.write	Unpaid and server-priced

Every write requires a 16–255-character Idempotency-Key and returns an op_ operation identity in response metadata. Reuse the same key after an ambiguous network result.

Not exposed: payment capture, refunds, order completion, fiscal provisioning or mutation, provider credentials, workforce mutations, arbitrary bulk writes, and MCP writes.