vault.recent_code should ALWAYS return a code (i.e., generate if nil)
delivery refactor to reduce shame and eliminate indeterministic spec tests