Ok I found it. When people set the status to shipped by editing the status field, it wasn't firing, so I set an alert to return false when people set that, so that the only way to get there was to click the Mark Shipped button