Customers were seeing a thank-you message before they'd thanked anyone.
The quote page had an accept_promo URL parameter that, when present, auto-called the confirmation handler on page load. The intent was convenience: click a link in an SMS, arrive at the quote, it's already confirmed. The reality was confusion: customers landed on a page showing "Thank you for confirming!" without ever reviewing their quote or pressing a button. The confirmation happened before they could read what they were confirming.
The auto-accept function got removed from the frontend. The ?accept_promo=true parameter got stripped from the SMS notification URL and both email template links. A test was updated to assert the parameter is no longer present. The admin-side promo acceptance — where staff mark a quote as accepted during save — stayed intact, because that's a different workflow with different trust assumptions.
Well-intentioned automation that removes user agency isn't a feature — it's a presumption. The customer should see their quote, read the services, and press confirm themselves. The click is the decision. Removing it removed the decision.