User asset transfer and external payout are tracked separately. Complete only after the payout reference is confirmed; reject before funding cancels the order, while reject after funding returns assets to the user.