Unit 03 · Chapter 4 · 10 min read

Reserves, limits, and payout policy

Size protection against the obligation it can actually cover.

A reserve is not a force field. It is money with an owner, a purpose, a release rule, and limits on use. A beautifully calculated reserve is useless if the funds are unavailable when the refund bill arrives.

Estimate the open obligation

Start with the exposure path: unsettled transactions, undelivered sales, pending refunds, and potential returns. Avoid adding overlapping measures that represent the same obligation. Define the event that closes each exposure.

For a simple advance-sale merchant, $200,000 in undelivered sales is a useful starting point. It is not automatically the final loss. Some goods may still be delivered, funds may remain available, and recoveries may occur. Use a gross exposure measure and a separate loss estimate. Keeping both avoids hiding a large obligation behind an optimistic recovery assumption.

Open exposure is a stock measured at a point in time. Payment volume is a flow measured over a period. Multiplying a month’s volume by an arbitrary percentage does not automatically produce the amount at risk. Start with the obligations still open: undelivered services, possible refunds under the relevant assumptions, disputed amounts, and other commitments. Then identify which obligations overlap so the model does not count the same purchase several times.

This distinction becomes visible when a business stops selling. New volume falls to zero, yet old fulfillment and refund obligations remain. A monitoring system that looks only at current processing volume may conclude that risk has disappeared just as the platform loses its easiest source of future offsets.

Estimate the open obligation — the flow

IdentifyList open customer obligations
DeduplicateRemove overlapping exposure records
CloseUse evidence of fulfillment or resolution

Follow the sequence. Use evidence of fulfillment or resolution. Chapter sources · Open image

Estimate the open obligation Estimate the open obligation — the distinction These concepts answer different questions. Read each definition in the context of the section. Gross exposure Amount still subject to the loss path Net loss estimate Exposure adjusted for scenario and recovery — These concepts answer different questions. Read each definition in the context of the section. Chapter sources · Open image

Estimate the open obligation Advance-sale exposure Fictional teaching record. Do not add the subset twice. Advance-sale exposure Illustrative data; not a real customer record or a prescribed policy. Undelivered 200000 USD Open customer promises Pending refunds 20000 USD Subset already included Gross total 200000 USD Do not add the subset twice The same sale must not inflate exposure twice — Fictional teaching record. Do not add the subset twice. Chapter sources · Open image

Estimate the open obligation Estimate the open obligation — control and failure modes The same sale must not inflate exposure twice. The branches show why alternative designs fail. Control design Deduplicate overlapping obligations. The same sale must not inflate exposure twice. Failure mode 1 Add every report total together. Reports can overlap. avoid Failure mode 2 Call exposure a certain loss. Some obligations may be fulfilled. avoid Failure mode 3 Subtract hoped-for recovery as cash. An estimate is not available cover. avoid — The same sale must not inflate exposure twice. The branches show why alternative designs fail. Chapter sources · Open image

Understand reserve structures

A rolling reserve retains part of eligible volume for a defined period. A fixed reserve targets an amount. Other structures can combine conditions. The agreement determines ownership, permitted use, release, and any limits.

Model the reserve as a ledger with accruals, uses, and releases. A percentage without a release schedule cannot predict available protection. If 10 percent of $50,000 eligible sales is retained, the new accrual is $5,000 under this example. That does not establish the total reserve balance because earlier releases and uses may also occur. All percentages here are teaching assumptions, not market standards.

Understand reserve structures Understand reserve structures — the flow Follow the sequence. Return funds when conditions are met. Accrue Retain eligible funds under terms Use Apply only to permitted obligations Release Return funds when conditions are met — Follow the sequence. Return funds when conditions are met. Chapter sources · Open image

Understand reserve structures Understand reserve structures — the distinction These concepts answer different questions. Read each definition in the context of the section. Reserve accrual New amount retained this period Reserve balance Opening plus accruals less uses and releases — These concepts answer different questions. Read each definition in the context of the section. Chapter sources · Open image

Understand reserve structures Reserve movement Fictional teaching record. Before other balance movements. Reserve movement Illustrative data; not a real customer record or a prescribed policy. Eligible sales 50000 USD Defined period Retention 10 percent Illustrative agreed rate New accrual 5000 USD Before other balance movements A rate alone cannot describe the balance — Fictional teaching record. Before other balance movements. Chapter sources · Open image

Understand reserve structures Understand reserve structures — control and failure modes A rate alone cannot describe the balance. The branches show why alternative designs fail. Control design Track reserve movements in a ledger. A rate alone cannot describe the balance. Failure mode 1 Assume all retained funds are unrestricted. Terms can limit use. avoid Failure mode 2 Call 10 percent a universal standard. The example is not a prescribed rate. avoid Failure mode 3 Ignore releases. Protection can decline over time. avoid — A rate alone cannot describe the balance. The branches show why alternative designs fail. Chapter sources · Open image

Use limits to bound exposure

A volume limit, transaction limit, payout limit, and outstanding-exposure limit constrain different quantities. A daily sales cap may not control months of undelivered obligations. Choose the limit that matches the loss mechanism.

Enforce limits atomically when concurrent requests can consume the same capacity. If two workers each see $1,000 remaining and each release $800, a read-then-write design can exceed the limit. Use a transactional reservation and release unused capacity after resolution. Monitor both successful enforcement and false blocks caused by stale reservations.

Use limits to bound exposure Use limits to bound exposure — the flow Follow the sequence. Return unused capacity with evidence. Measure Choose the exposure quantity Reserve Consume capacity atomically Release Return unused capacity with evidence — Follow the sequence. Return unused capacity with evidence. Chapter sources · Open image

Use limits to bound exposure Use limits to bound exposure — the distinction These concepts answer different questions. Read each definition in the context of the section. Daily volume limit Caps a period flow Outstanding limit Caps unresolved accumulated exposure — These concepts answer different questions. Read each definition in the context of the section. Chapter sources · Open image

Use limits to bound exposure Concurrent release example Fictional teaching record. Cannot both fit. Concurrent release example Illustrative data; not a real customer record or a prescribed policy. Capacity 1000 USD Available before requests Request A 800 USD Needs a reservation Request B 800 USD Cannot both fit Concurrent decisions must see one consistent limit — Fictional teaching record. Cannot both fit. Chapter sources · Open image

Use limits to bound exposure Use limits to bound exposure — control and failure modes Concurrent decisions must see one consistent limit. The branches show why alternative designs fail. Control design Reserve shared capacity atomically. Concurrent decisions must see one consistent limit. Failure mode 1 Check then update without locking. Both requests can pass against the same capacity. avoid Failure mode 2 Use a daily cap for all future delivery risk. Exposure can accumulate across days. avoid Failure mode 3 Never release expired reservations. Legitimate activity can remain blocked. avoid — Concurrent decisions must see one consistent limit. The branches show why alternative designs fail. Chapter sources · Open image

Match payout timing to customer promises

Payout timing shifts liquidity between the platform and merchant. Faster payouts can improve the merchant experience while increasing platform exposure. Delays can reduce exposure but may harm fulfillment if the merchant needs cash to buy goods.

Analyze both effects. A payout policy that starves a viable merchant can create the failure it was meant to prevent. Use evidence about delivery, funds availability, and the business model. Make the schedule and review process understandable. Any restriction must follow the agreement and applicable duties, with an accountable path for correction.

Match payout timing to customer promises Match payout timing to customer promises — the flow Follow the sequence. Balance terms controls and review. Exposure Estimate what early release creates Merchant cash Assess fulfillment funding needs Policy Balance terms controls and review — Follow the sequence. Balance terms controls and review. Chapter sources · Open image

Match payout timing to customer promises Match payout timing to customer promises — the distinction These concepts answer different questions. Read each definition in the context of the section. Faster payout Improves merchant liquidity Longer hold May reduce platform exposure but strain delivery — These concepts answer different questions. Read each definition in the context of the section. Chapter sources · Open image

Match payout timing to customer promises Payout tradeoff Fictional teaching record. Illustrative controlled compromise. Payout tradeoff Illustrative data; not a real customer record or a prescribed policy. Supplier due today Merchant funding need Customer delivery next week Open promise Policy staged release Illustrative controlled compromise A cash restriction can change merchant behavior — Fictional teaching record. Illustrative controlled compromise. Chapter sources · Open image

Match payout timing to customer promises Match payout timing to customer promises — control and failure modes A cash restriction can change merchant behavior. The branches show why alternative designs fail. Control design Assess the effect on fulfillment as well as loss. A cash restriction can change merchant behavior. Failure mode 1 Delay every payout indefinitely. That can create avoidable harm. avoid Failure mode 2 Assume fast payout has no exposure. The platform may finance unresolved obligations. avoid Failure mode 3 Hide the review process. Merchants need a correction route. avoid — A cash restriction can change merchant behavior. The branches show why alternative designs fail. Chapter sources · Open image

Stress available cover

Reserve adequacy depends on correlated loss, timing, legal availability, currency, and counterparty access. A reserve held by a failed or frozen partner may not be usable when needed. A reserve in another currency can change value.

Build a stress table that shows gross obligations, eligible cover, expected recoveries, and the remaining gap separately. Test the same reserve against one scenario at a time without allocating it twice. Assign a response to a breach: new exposure limits, funding action, merchant review, or another approved measure. A stress report without an action owner is only a description.

A reserve balance is useful cover only to the extent it is legally and operationally available for the relevant obligation. It may be denominated in another currency, subject to another claim, or held with a counterparty that is also stressed. State the eligibility rules before deducting cover from gross exposure. An exposure report can show gross obligations, recorded reserves, eligible cover, and remaining exposure as separate lines. This makes the assumptions visible and prevents a reassuring net total from hiding a fragile source of protection.

Stress available cover Stress available cover — the flow Follow the sequence. Assign an approved response. Scenario Define the correlated loss event Cover Identify funds available for that event Gap Assign an approved response — Follow the sequence. Assign an approved response. Chapter sources · Open image

Stress available cover Stress available cover — the distinction These concepts answer different questions. Read each definition in the context of the section. Book balance Amount recorded as a reserve Eligible cover Amount accessible and permitted for this loss — These concepts answer different questions. Read each definition in the context of the section. Chapter sources · Open image

Stress available cover Stress coverage Fictional teaching record. Leaves 90000 USD gap. Stress coverage Illustrative data; not a real customer record or a prescribed policy. Obligation 120000 USD Scenario amount Reserve recorded 50000 USD Book balance Eligible now 30000 USD Leaves 90000 USD gap Recorded balance can overstate usable protection — Fictional teaching record. Leaves 90000 USD gap. Chapter sources · Open image

Stress available cover Stress available cover — control and failure modes Recorded balance can overstate usable protection. The branches show why alternative designs fail. Control design Use eligible accessible cover in the stress result. Recorded balance can overstate usable protection. Failure mode 1 Subtract all reserves everywhere. Funds may be restricted or already allocated. avoid Failure mode 2 Treat recovery estimates as guaranteed. They carry uncertainty. avoid Failure mode 3 Leave breaches without an owner. The exposure can continue to grow. avoid — Recorded balance can overstate usable protection. The branches show why alternative designs fail. Chapter sources · Open image

Chapter connections

This chapter builds on Cash-flow analysis and financial evidence. Continue with Portfolio monitoring and credit deterioration to follow the next part of the system. Use the glossary for terminology and risk mathematics for formulas and worked calculations.

Sources

Reviewed 2026-09-17