Payment review

Pending confirmation

Confirming records the actor, timestamp, amount, method, order, and ledger. Rejection requires a reason and lets the customer resubmit proof. Proof never marks an order paid by itself.