When is a SaSame plan honestly purchasable?

Commercial integrity prevents a price label from becoming a sale before the product can deliver what checkout promises.

Every plan carries exactly one of four states, and only forward transitions (plus a direct-to-retired exit) are legal:

APPROVED_NOT_LIVE -> TEST_MODE -> LIVE -> RETIRED

• APPROVED_NOT_LIVE — owner-approved amount; no live payment object exists; not purchasable; public surfaces must label it as not yet purchasable.
• TEST_MODE — payment objects exist and the fulfillment path is exercised end-to-end in test mode; still not purchasable with real money.
• LIVE — an owner checkpoint has executed: the live payment object exists, legal terms are published, and the fulfillment path is verified; purchasable.
• RETIRED — no longer sellable; history is preserved, not deleted.

A paid plan whose fulfillment path is null must never be LIVE or purchasable — this is a hard invariant, not a style guideline.

A TEST checkout, an approved amount, a payment object or a successful build alone does not make a plan purchasable or count as organic revenue.