Flag large refunds to finance in Slack

The trigger

One read-only SELECT against MySQL. Rowfire polls it for new rows, and the rule fires once per refund.

SELECT r.id AS refund_id,
       r.order_id,
       r.amount,
       r.currency,
       r.reason,
       r.issued_by,
       r.created_at
FROM refunds r
WHERE r.amount >= 500
  AND r.is_test = 0

The clock is created_at and the key is refund_id, so each refund is posted once. The query runs in MySQL’s own dialect, read-only. Table and column names are a sketch; adapt them to your schema.

Refund of {{ amount }} {{ currency }} on order {{ order_id }} by {{ issued_by }}: {{ reason }}

Before switching it on, backtest it: it shows how many refunds over the threshold the channel would have seen each day, which is the quickest way to pick a threshold that is useful rather than noisy.

For orders that never shipped at all, see orders paid but not fulfilled.