Root user canceling orders

On tryton 7.6 I noticed that my draft and quoted sales are no longer there.

Then I noticed that Root user canceled all my quoted and draft sales at 8:11 o’clock today.

Root user is disabled as it should be.

Any ideas? anyone else having similar issues?

Security issue?

I have blocked the port from the internet.

This is the row in the record log:

2025-08-06 08:11:00.014954 Root Transitioned to State : Cancelled

I have quotation quotation validity and quotation expire unset.

I have tested running “Confirm sales based on payment” scheduled action once, and it does not cancel the sales.

If the quotation date and validity are empty, the domain_quotation_expire fallback to today as expiration date.
But the cancel_expired_quotation cancels only sale strictly before today, so it should not have cancelled those.
Maybe the company is missing a timezone.

I meant “Cancel Expired Sale Quotation” scheduled action.
Company has set timezone.

I will keep this under observation and get back if there are further issues.