Delivery notes, proof of delivery and public signing

Understand external completion without local POD

Prevent a provider webhook from closing a job without local evidence.

Audience: Courier operations staffPermission: Courier: ViewModule v2.0.0
Exact navigationAdmin Area → Courier & Logistics → Jobs → Open externally updated job

What this guide covers

Prevent a provider webhook from closing a job without local evidence. The instructions below follow the supplied module’s controller, form and model rules, including server-side validation and downstream effects.

Exact step-by-step process

  1. Open the webhook/sync log.
  2. Open the job and delivery note.
  3. Confirm local state remains awaiting_signature when signed proof is missing.
  4. Complete the local POD flow.

Fields, choices and supported possibilities

This action uses the values already stored on the selected source record. Review that record before continuing.

Code-backed validations and workflow rules

  • An external completion event does not bypass the signed-POD-and-snapshot rule.

Expected result and verification

  • The source record, status/history and any downstream notification, provider, POD or finance record should agree after the action.

Security, audit and operational checks

  • Use the exact record and least-privilege role before changing any state.
  • Verify the saved record after every action; a browser message alone is not evidence that every downstream step completed.
  • Use protected document and image routes rather than exposing server filesystem paths.
  • Keep customer, driver, provider, financial and credential data within the authorised workflow.
  • For provider, finance, employment, transport and compliance decisions, follow the organisation’s authorised professional process.
Do not bypass the code flowDo not force database values, invent a status, mark a job completed without signed POD evidence, or expose encrypted credentials to make a screen appear successful.