The binaries read CART_DIR (cmd/cart) and CHECKOUT_DIR (cmd/checkout, cmd/backoffice); the deployment set DATA_DIR/CHECKOUT_DATA_DIR which nothing reads, so storage fell back to the ephemeral relative ./data and was wiped on every redeploy. Use the names the code actually reads. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>