There are no privacy rules on the backend workflow because it does not touch a user or can be accessed by a user.
The server logs read Running Action
Finish Action and have the right record count for the latest cart (it sucks, I have to create a cart every time I test this - I’m close to 400 LOL).
It does not show the record(s) that are written
I can see in the JSON load in the console that the items are being sent from Shopify. Maybe I should just write them to a text field to make sure they are captured. I might try that.