Escrow sounds simple: hold the buyer's money until the seller delivers. The code for that is perhaps a day of work. Everything else is policy.
What counts as delivered? For a digital key, the moment it is revealed. For a subscription top-up, the moment the provider confirms. Each product type needed its own definition before a line of code made sense.
Disputes need a clock. Without deadlines a case sits open forever and the money sits with you, which is a liability. Ours auto-resolves in the buyer's favour after seven days of seller silence.
Every state change is written to an append-only ledger. When someone asks where their money went eight months later, you need an answer that does not depend on memory.
Fourteen months in: zero unresolved disputes and no manual ledger corrections.