Proposed change: Return an error when shipment queueing fails. Driver change_impact, shipping / master, ShippingController.postShipping. Two candidate tests in ITShippingController.java: newShipment verifies shipment publication; doNotCrashWhenNoQueue currently returns the shipment even when queue publication fails. I’ll also check the checkout caller. Separate Driver get_source_file call for orders / master, OrdersController.java. Checkout waits for shipment before saving, lines 101–117. Verification plan, not completed work: update the queue-failure expectation; keep successful shipment coverage; verify checkout handles the error. Captured test-impact and source evidence are condensed. No code was changed or tests executed; the cross-service check is an authored verification plan, not an inferred graph edge.