Orders now carry a true fulfillment lifecycle distinct from payment status: pending, fulfilling, shipped, in-transit, delivered, plus cancelled and returned. Transitions are guarded and timestamped, carry carrier, tracking, and ETA, and write to an append-only fulfillment timeline. Buyers are notified at ship, everyone relevant at delivery, with a review prompt to close the loop.